On the home page of the console, click Command Control.
In the command control pane, click Rules.
Select the rule you want to modify.
In the details pane, click the edit icon.
Modify the following as per your requirement:
Name: Change the name of the rule.
Disabled: To disable the rule, select the Disabled box. A disabled rule is dimmed.
Description: Specify a description of the rule.
User Message: Specify a user message to be displayed to the user when this rule is processed, before any commands are run.
Session Capture: Select either On or Off. Setting Session Capture to On allows the Audit Manager to perform keystroke logging for the rule.
To view a captured session from a Command Control report, an Auditing Manager and the Reports Console must be installed.
X11 Enable: Select either Yes or No to enable the X11 application access over SSH Relay.When you enable X11 application access, you can choose to enable the video recording of the session. Select Video Capture On to enable video capture of the session.
Authorize: Select either Yes or No, depending on whether you want the command protected by the rule to be authorized or not authorized if the rule conditions are met.
Define what happens next by using the drop-down list as follows:
Blank: The next rule in the hierarchy is checked.
Stop: No more rules are checked for the command.
Return: The next rule to be checked is up one level in the hierarchy from the current rule.
Stop if authorized: If Authorize is set to Yes, no more rules are checked for the command.
Stop if unauthorized: If Authorize is set to No, no more rules are checked for the command.
Secondary Authentication: If Secondary Authentication is set to Yes, then Multi-Factor Authentication is applied during authorization. This is supported for Advanced Authentication only.
Run User: Define a run user by selecting the name of the user you want to run this command (this overrides any username defined through a set command).
Account Domain: Select the appropriate LDAP or SSH resource from the drop down list.
Credentials: The credential for the selected resource gets populated. You can also select the required credential from the drop-down list.
Run User: The Run User gets automatically populated with the domain user provided in the resource.
Run Host: Define a run host by selecting the name of the host on which you want to run this command (this overrides any hostname defined through a set command).
NOTE:When modifying a rule for Run as Privileged User method, ensure to modify the Run Host as Submit Host.
Risk Level: Set a Risk Level of 0 to 99. This option allows you to set a value representing the relative risk of a rule with the session auditing option (see cpcksh). When viewing a Command Control Keystroke Report, you see commands controlled by rules with different risk values represented in different colors.
Audit Group: Define an Audit Group. This setting is for use in Compliance Auditor reports.
NOTE:To configure video capturing refer section Section 8.2.4, Configuring Video Capture
Click Modify.
Drag-and-drop Account Groups, User Groups, Host Groups, Commands, Scripts, or Access Times to add them to Rules. In the pop-up window that appears, select Yes to add them or No to discard your changes.