Defining Rights to Use Commands

As discussed in Basic concepts of access rights and roles, access rights allow users to perform specific operations. You define the most basic rights—such as the right to log on or connect remotely—when you define roles. However, you can use more granular command access rights to tightly control who has access to individual command-line programs. This chapter describes how to define access rights that allow users to execute command-line programs on Centrify-managed computers.