Command Control uses rules to protect and control user commands. When configuring a rule, you must set conditions for the rules to determine which rule or rules are processed, for example, on the command submitted or the user who submitted it. You also need to define what processing to do if the rule conditions are matched.
The components that you can define and configure for a rule are as following:
The rule. For configuration information, see Rules.
Account groups, user groups, and host groups, which determine who matches the rule. For configuration information, see Command Control Groups.
Commands. For configuration information, see Section 6.3.4, Commands.
Credential Vault. For configuration information, see Contextual Help.
Scripts for additional functionality. For configuration information, see Scripts.
Access time to define specific time interval during which access is denied or granted. For configuration information, see Access Times.
NOTE:To enable access to the Command Control console for a Framework user and to control the level of access available, you must add the user to a group with the appropriate roles defined. See Section 4.1.4, Configuring Permissions for details.
The following additional features are provided to assist you with Command Control configuration and management: