If you have a checkpoint firewall, you probably know about Gaia... and if you have more than one firewall admin, you probably want to individually authenticate them to the operating system (as apposed to a encrypted file of usernames & passwords which get's passed around the office)
add rba role ... 
