How to control groupaccess from the command line
OverviewThe command line tool "VISULOX policy groupaccess" allows to control groupaccess. |
Usage
The following subcommands are available:
| list | List and print Group Access Policies. |
| fields | List available fields in the database (-raw = enhanced output) |
| add | Add a Group Access Policy. |
| edit | Modify fields of a Group Access Policy. |
| reset | Reset a Group Access Policy. |
| purge | Remove outdated entries. Can be used via cron-job. |
Group Access Policy elements (edit)
| -mode <> | Mode of access |
| -name <> | Name of policy or use AUTO <> |
| -object <> | Policy filter: mask or unique distinguished object of user or group <> Mandatory in add, update, reset to identify a unique object in the datasource table (attached user repositories). |
| -application <> | Policy filter: mask or application name or application mask <> |
| -ticket <> | Assign ticket to this access <> |
| -region <> | Name of region in the database. Default value: @LOCAL. |
| -timeprofile <> | Name of time profile in the database. Default value: 24x7. |
| -starttime <> | Start of access: now or timestring. Default value: now. |
| -endtime <> | End of access: endless or timestring. Default value: endless. |
| -comment <> | Comment for policy. Default value: CLI. The comment can have multiple lines. "\n" can be used as a line separator. |
| -grant <> | Set granted user in database record <> |
Configuration of ticket ID as a regular expression
It is possible to configure the entry format of the ticket ID as a regular expression:
|
Examples
List current available Group Access Policies
|
List members of Group Access Policy
visulox policy groupaccess list -name <name>
List available fields
|
Display selected fields
|