Managing access control list from the Orchestration CLI

About this task

Create an access control list by assigning security roles to users or groups in one or more folders.

Access control lists can be of standard or administrative type. Standard access control lists are based on folder.

You can either give access to user or groups, or manage and view access control lists from Orchestration CLI.

Give access to users or groups

About this task

You can give standard or administrative access from the Orchestration CLI.

To create a standard access control list, use the following syntax:
$acl
ACCESSCONTROLLIST FOLDER /FOLDERPATH
        user1 SECROLE1
        user2 SECROLE2, SECROLE3
        ...
        group: group4 SECROLE4
        ...
END
Note: You cannot reference a folder that does not exist, therefore you must create a folder before referencing it in the access control list.

To create an administrative access control list, use the following syntax:

$acl
ACCESSCONTROLLIST ADMIN
        user1 ADMIN_SECROLE1
        user2 ADMIN_SECROLE2, ADMIN_SECROLE3
        ...
        group: group4 ADMIN_SECROLE4
        ...
END
Note: Administrative access control lists cannot contain standard security roles. At the same time, standard access control lists cannot contain administrative security roles.

Results

The access definition is now added to the database.