Command Lists are useful to allow or deny access on specific commands or applications within privileged sessions.
On Agents, Privileged Applications or Privileged Commands permissions can be configured using Command Lists, to allow privileged access to specific applications or commands, rather than providing a complete privileged session.
On Agent-less scenarios, Command Lists are helpful to allow or deny specific commands within privileged sessions.