Managing access control lists from the Orchestration CLI

About this task

Access control lists can be of standard or administrative type. Standard access control lists are based on folder. This means that the security roles assigned in a folder-based ACL automatically govern access to all scheduling and security items defined within that folder, including AI agents (aiagent).

You can either give access to user or groups, or manage and view access control lists from the Orchestration CLI.

Give access to users or groups

About this task

You can give standard or administrative access from the Orchestration CLI.

To create a standard access control list, use the following syntax:
$acl
ACCESSCONTROLLIST FOLDER /FOLDERPATH
        user1 SECROLE1
        user2 SECROLE2, SECROLE3
        ...
        group: group4 SECROLE4
        ...
END
Note: You cannot reference a folder that does not exist, therefore you must create a folder before referencing it in the access control list.

To create an administrative access control list, use the following syntax:

$acl
ACCESSCONTROLLIST ADMIN
        user1 ADMIN_SECROLE1
        user2 ADMIN_SECROLE2, ADMIN_SECROLE3
        ...
        group: group4 ADMIN_SECROLE4
        ...
END
Notes:
  • Administrative access control lists cannot contain standard security roles. At the same time, standard access control lists cannot contain administrative security roles.
  • When specifying a group name with spaces, enclose it in double quotes ("") or else an error is returned.

Results

The access definition is now added to the database.