The following permissions can be assigned to the command control module in order to control access to the Command Control and Access Control console. Select from the following permissions when you are creating a group that you want to manage and test the rules in the command control or access control database.
|
Descriptive Permissions |
Allows users to... |
|---|---|
|
All Permissions on Access Control and Command Control |
Have permissions to perform all operations. This implies you have “*” permission to Access Control or Command Control console. |
|
View, Modify Objects and Transaction Permissions in Access Control and Command Control |
Extract user credentials, including name and e-mail address, from the auth database into the account and user group definitions. Used in conjunction with the cmdctrl write (with read) and admin permissions. This implies you have read permission to auth module. |
|
View Access Control or Command Control Console |
View the Access Control and Command Control console. This implies you have console permission to Access Control and Command Control console as applicable. |
|
View Access Control Objects |
View the Access Control and Command Control objects. |
|
Manage Access Control and Command Control Objects |
Configure the resources and credentials in the command control rules. This implies you have read permission to prvcrdvlt module. |