Citrix NetScaler Administration Guide
•Group Name* (Required for a new group. Cannot be changed for an existing group.)
•CLI Prompt
•CLI Idle Session Timeout (Secs)
* A required parameter
4.Under Members, select users from the Available Users list and click Add to move them to the Configured Users list.
5.Click Create or OK, and then click Close.
A message appears in the status bar, stating that the group has been configured successfully.
Configuring Command Policies
Command policies regulate which commands, command groups, vservers, and other entities that users and user groups are permitted to use.
The Citrix® NetScaler® appliance provides a set of
Here are the key points to keep in mind when defining and applying command policies.
wYou cannot create global command policies. Command policies must be bound directly to NetScaler users and groups.
wUsers or groups with no associated command policies are subject to the default (DENY- ALL) command policy, and are therefore unable to execute any configuration commands until the proper command policies are bound to their accounts.
wAll users inherit the policies of the groups to which they belong.
wYou must assign a priority to a command policy when you bind it to a user account or group account. This enables the NetScaler to determine which policy has priority when two or more conflicting policies apply to the same user or group.
wThe following commands are available by default to any user and are unaffected by any command you specify:
help cli, show cli attribute, clear cli prompt, alias, unalias, help, history, quit, exit, whoami, config, set cli mode, unset cli mode, show cli mode, set cli prompt, and show cli prompt.
Built-in Command Policies
The following table describes the
27
