VISULOX 4 Documentation
4.3.2 4.3.1 4.3.0 4.2.0
4.3.2 4.3.1 4.3.0 4.2.0

How to control groupaccess from the command line

Overview

The command line tool "VISULOX policy groupaccess" allows to control groupaccess.



Usage

The following subcommands are available:

list

List and print Group Access Policies.

fields

List available fields in the database (-raw = enhanced output)

add

Add a Group Access Policy.

edit

Modify fields of a Group Access Policy.

reset

Reset a Group Access Policy.

purge

Remove outdated entries. Can be used via cron-job.

Group Access Policy elements (edit)

-mode <>

Mode of access

-name <>

Name of policy or use AUTO <>

-object <>

Policy filter: mask or unique distinguished object of user or group <>

Mandatory in add, update, reset to identify a unique object in the datasource table (attached user repositories).

-application <>

Policy filter: mask or application name or application mask <>

-ticket <>

Assign ticket to this access <>

-region <>

Name of region in the database. Default value: @LOCAL.

-timeprofile <>

Name of time profile in the database. Default value: 24x7.

-starttime <>

Start of access: now or timestring. Default value: now.

-endtime <>

End of access: endless or timestring. Default value: endless.

-comment <>

Comment for policy. Default value: CLI.

The comment can have multiple lines. "\n" can be used as a line separator.

-grant <>

Set granted user in database record <>

Configuration of ticket ID as a regular expression

It is possible to configure the entry format of the ticket ID as a regular expression:

visulox config -name entry.access.ticketid
 
    ----------------------------------------------
    | parameter             |      type | value  |
    ----------------------------------------------
    | entry.access.ticketid | OPERATION | ^A-.+$ |
    ----------------------------------------------

Examples

List current available Group Access Policies

visulox policy groupaccess list
    -------------------------------------------------------
    | basicname |    ticketid | starttime | endtime |
    -------------------------------------------------------
    | ...


List members of Group Access Policy

visulox policy groupaccess list -name <name>


List available fields

visulox policy groupaccess fields


Display selected fields

visulox policy groupaccess list -fields basicname,endtime,timeprofile