Citrix ByteMobile T1010, Установка, настройка и администрирование

Страница: 124 / 172

5-12 T-Series Traffic Director Installation, Configuration and Administration Guide
Chapter 5 Administration
• The following commands are available by default to any user and are unaffected by
any command you specify:
help cli , show cli attribute , clear cli prompt , alias ,
unalias , help , history , quit , exit , whoami , config , set cli mode , unset cli mode ,
show cli mode , set cli prompt , and show cli prompt .
Built-in Command Policies
Following are the the built-in policies.
• read-only — Read-only access to all show commands except show runningconfig,
show ns.conf, and the show commands for the T1000 command group.
• operator — Read-only access and access to commands to enable and disable
services and servers or place them in ACCESSDOWN mode.
• network — Full access, except to the set and unset SSL commands, sh ns.conf, sh
runningconfig, and sh gslb runningconfig commands.
• superuser — Full access. Same privileges as the nsroot user.
Creating Custom Command Policies
For more information on this topic, refer to the Citrix documentation. For most users, the
built-in command policies are sufficient.
Binding Command Policies to Users and Groups
Once you have defined your command policies, you must bind them to the appropriate user
accounts and groups. When you bind a policy, you must assign it a priority so that the T1000
can determine which command policy to follow when two or more applicable command
policies are in conflict.
Command policies are evaluated in the following order:
• Command policies bound directly to users and the corresponding groups are
evaluated according to priority number. A command policy with a lower priority
number is evaluated before one with a higher priority number. Therefore, any
privileges the lower-numbered command policy explicitly grants or denies are not
overridden by a higher-numbered command policy.
• When two command policies, one bound to a user account and other to a group, have
the same priority number, the command policy bound directly to the user account is
evaluated first.
To bind command policies to a user:
At the T1000 command prompt, use the following commands to bind a command policy to a
user and verify the configuration:
• bind system user userName -policyName policyName priority
• show system user userName