VISULOX 4 Documentation

How to control groupaccess from the command line

Overview

The command line tool "VISULOX policy groupaccess" allows to control groupaccess.



Usage

The following subcommands are available:

list

List and print Group Access Policies.

fields

List available fields in the database (-raw = enhanced output)

add

Add a Group Access Policy.

edit

Modify fields of a Group Access Policy.

reset

Reset a Group Access Policy.

purge

Remove outdated entries. Can be used via cron-job.

Group Access Policy elements (edit)

-mode <>

Mode of access

-name <>

Name of policy or use AUTO <>

-object <>

Policy filter: mask or unique distinguished object of user or group <>

Mandatory in add, update, reset to identify a unique object in the datasource table (attached user repositories).

-application <>

Policy filter: mask or application name or application mask <>

-ticket <>

Assign ticket to this access <>

-region <>

Name of region in the database. Default value: @LOCAL.

-timeprofile <>

Name of time profile in the database. Default value: 24x7.

-starttime <>

Start of access: now or timestring. Default value: now.

-endtime <>

End of access: endless or timestring. Default value: endless.

-comment <>

Comment for policy. Default value: CLI.

The comment can have multiple lines. "\n" can be used as a line separator.

-grant <>

Set granted user in database record <>

Configuration of ticket ID as a regular expression

It is possible to configure the entry format of the ticket ID as a regular expression:

visulox config -name entry.access.ticketid
 
    ----------------------------------------------
    | parameter             |      type | value  |
    ----------------------------------------------
    | entry.access.ticketid | OPERATION | ^A-.+$ |
    ----------------------------------------------

Examples

List current available Group Access Policies

visulox policy groupaccess list
    -------------------------------------------------------
    | basicname |    ticketid | starttime | endtime |
    -------------------------------------------------------
    | ...


List members of Group Access Policy

visulox policy groupaccess list -name <name>


List available fields

visulox policy groupaccess fields


Display selected fields

visulox policy groupaccess list -fields basicname,endtime,timeprofile