Defining Rights to Use PAM Applications

As discussed in Basic concepts of access rights and roles, access rights allow users to perform specific operations. You define the most basic rights—such as the right to log on or connect remotely—when you define roles. To use the rights associated with a role, however, you must be able to authenticate your identity through a pluggable authentication module (PAM) application, such as login or ssh. This chapter describes how to define PAM application rights that authorize users to log on or access services on Centrify-managed computers.