Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

In the EMA, navigate to All > OAM > Local Auth > Rule-list > Cmdrule.

 

The window Cmdrule appears, with the table Cmdrule List.

Caption
0Figure
1Cmdrule window

 

...

The parameters (presented as columns) in the table Cmdrule List are:

Caption
0Table
1Parameters: Cmdrule List

...

 ColumnDescription
NameArbitrary name assigned to the rule.
ContextThis leaf matches if it has the value * or if its value identifies the agent that is requesting access, i.e., cli for CLI and webui for Web UI. The string * means any of the Context can be associated with this rule.
CommandSpace-separated tokens representing the command.
Access-operations

Access operations associated with this rule.

This leaf matches if it has the value * or if the bit corresponding to the required operation is set.

ActionThe access control action associated with the rule. If a rule is determined to match a particular request, then this object is said to determine whether to permit or deny the request.
CommentText description of the access rule.

...

 

 

Edit Cmdrule

...

To edit a Cmdrule, select it in the table Cmdrule List.

Caption
0Figure
1Select Cmdrule to edit

 

...

On saving the changes successfully, the Success message appears.

Caption
0Figure
1Success message

 

 

Create new Cmdrule

 

To create new Cmdrule, select a Rule-list from the drop-down menu Rule-list, that does not belongs to any one of the following Groups:

...

Note

Users are not allowed to create a New Cmdrule if the Cmdrule corresponds to a Rule-list that belongs to any one of the following groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor

For example, 589 is a Cmdrule, for which the corresponding Rule-list is CMD-100. It belongs to the Group Administrator. An attempt to create the Cmdrule 589 results in the following Error message:

Caption
0Figure
1New Cmdrule Error Message


Copy Cmdrule

...

To copy a Cmdrrule, from the drop-down menu Rule-list, select a Rule-list that does not belongs to any one of the following Groups:

...

Note

Users are not allowed to copy a Cmdrule and create a new Cmdrule with some or all configurations different, if the Cmdrule corresponds to a Rule-list that belongs to any one of the following groups:

  • Administrator
  • Operator
  • FieldService
  • Guest
  • Calea
  • SecurityAuditor

For example, 100 is one such Cmdrule, for which the corresponding Rule-list is CMD-100. It belongs to the Group Administrator. An attempt to copy the Cmdrule 100 results in the following Error message:

Caption
0Figure
1Copy Error message

 

 

Reorder Cmdrule

...

To reorder a Cmdrule, from the drop-down menu Rule-list.

...