In the EMA, navigate to All > OAM > Local Auth > Rule-list > Cmdrule.

The window Cmdrule appears, with the table Cmdrule List.

Cmdrule window

 

Select a Rule-list from the drop-down menu Rule-list.

Rule-list dropdown

 

The selected Rule-list appears in the table Cmdrule List.

Cmdrule List with Rule-list selected

 

The parameters (presented as columns) in the table Cmdrule List are:

Parameters: Cmdrule List

 ColumnDescription
NameArbitrary name assigned to the rule.
ContextThis leaf matches if it has the value * or if its value identifies the agent that is requesting access, i.e., cli for CLI and webui for Web UI. The string * means any of the Context can be associated with this rule.
CommandSpace-separated tokens representing the command.
Access-operations

Access operations associated with this rule.

This leaf matches if it has the value * or if the bit corresponding to the required operation is set.

ActionThe access control action associated with the rule. If a rule is determined to match a particular request, then this object is said to determine whether to permit or deny the request.
CommentText description of the access rule.
 

Edit Cmdrule

To edit a Cmdrule, select it in the table Cmdrule List.

Select Cmdrule to edit

 

The frame Edit Selected Cmdrule appears below the table Cmdrule List.

Edit Selected Cmdrule

The fields in this frame are same as that of the table Cmdrule List. For brief descriptions of the fields, see the table in the previous section.

 

Make necessary changes and click Save, to save all the changes made. Click Undo Edits to cancel all modifications made since the last saved configuration.

On saving the changes successfully, the Success message appears.

Success message

 

Create new Cmdrule

To create new Cmdrule, select a Rule-list from the drop-down menu Rule-list, that does not belongs to any one of the following Groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor

 

For more details on Rule-list and Group, refer to Local Auth - Rule-list and Local Auth - Group respectively.

Choosing the option All Rule-lists from the drop-down menu Rule-list does not allow access to the button New Cmdrule.

 

Click the button New Cmdrule.

New Cmdrule button

 

The frame Create New Cmdrule appears.

Create New Cmdrule

The fields in this frame are same as that of the table Cmdrule List. For brief descriptions of the fields, see the table in the previous section.

 

Make necessary changes and click Save, to save all the changes made. Click Undo Edits to cancel all modifications made since the last saved configuration.

On saving the changes successfully, the Success message appears.

Success Message

Users are not allowed to create a New Cmdrule if the Cmdrule corresponds to a Rule-list that belongs to any one of the following groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor

For example, 589 is a Cmdrule, for which the corresponding Rule-list is CMD-100. It belongs to the Group Administrator. An attempt to create the Cmdrule 589 results in the following Error message:

New Cmdrule Error Message


Copy Cmdrule

To copy a Cmdrrule, from the drop-down menu Rule-list, select a Rule-list that does not belongs to any one of the following Groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor

For more details on Rule-list and Group, refer to Local Auth - Rule-list and Local Auth - Group respectively.

 

Select the appropriate Cmdrule from the table Cmdrule List. Click the button Copy Cmdrule.

Select Cmdrule to copy

Copy Cmdrule button

 

The frame Copy Selected Cmdrule appears below the table Cmdrule List.

Copy Cmdrule window

The fields in this frame are same as that of the columns in the table Cmdrule List. For brief description of the fields, refer to the table in the first section.

 

Make the necessary changes and click Save, to save the changes made. Click the button Undo Edits to cancel all changes made since the last saved configuration.

On saving the changes successfully, the Success message appears.

Success message

Users are not allowed to copy a Cmdrule and create a new Cmdrule with some or all configurations different, if the Cmdrule corresponds to a Rule-list that belongs to any one of the following groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor

For example, 100 is one such Cmdrule, for which the corresponding Rule-list is CMD-100. It belongs to the Group Administrator. An attempt to copy the Cmdrule 100 results in the following Error message:

Copy Error message

 

Reorder Cmdrule

To reorder a Cmdrule, from the drop-down menu Rule-list.

Select the appropriate Cmdrule from the table Cmdrule List. Click the button Reorder Cmdrule.

Select Cmdrule for reordering

Reorder Cmdrule button

 

The frame Reorder Cmdrule appears below the table Cmdrule List.

Reorder Cmdrule window

 

This frame contains a drop-down menu, which presents the possible destinations of the Cmdrule selected for reordering. The possible destinations are:

  • after
  • before
  • to the first place
  • to the last place

If the chosen destination is after or before, the SBC asks the user to provide the Cmdrule, after/before which the selected Cmdrule is to be placed. In this case, the appearance of the frame Reorder Cmdrule changes slightly.

Reorder after/before

 

 

If the chosen destination is to the first place or to the last place, the appearance of the frame remains the same.

Reoder first/last

 

 

Make the necessary changes and click Save, to save the changes made. Click the button Undo Edits to cancel all changes made since the last saved configuration.

On saving the changes successfully, the Success message appears.

Reorder Success

  • No labels