Before Bastionhost users can perform O&M operations on hosts, the administrator must create O&M rules to authorize the users to perform O&M operations on specified hosts and host accounts. This topic describes how to create O&M rules.

Authorize hosts

To authorize hosts for a user, follow these steps:

  1. Log on to the Bastionhost system. For more information, see Log on to Bastionhost.
  2. In the left-side navigation pane, click Users > Users.
  3. Find the target user and click Authorize Hosts in the Actions column.
    Authorize hosts for a user (1)
  4. On the Authorized Hosts tab that appears, click Authorize Hosts.
  5. In the Authorize Hosts pane that appears, select one or more hosts you want to authorize for the user to maintain and click OK.
    Authorize hosts for a user (2)

Authorize the accounts of a single host

To authorize the accounts of a single host for a user, follow these steps:

  1. Log on to the Bastionhost system. For more information, see Log on to Bastionhost.
  2. In the left-side navigation pane, click Users > Users.
  3. Find the target user and click Authorize Hosts in the Actions column.
    Authorize hosts for a user (1)
  4. On the Authorized Hosts tab that appears, find the target host and click the information in the Authorized Accounts column.
    Authorize the accounts of a single host
  5. In the Select Accounts pane that appears, select one or more accounts and click Update.
    Note If the host does not have an account, you can click Create Host Account in the Select Accounts pane to create one first.

Authorize the accounts of multiple hosts

To authorize the accounts of multiple hosts for a user at a time, follow these steps:

  1. Log on to the Bastionhost system. For more information, see Log on to Bastionhost.
  2. In the left-side navigation pane, click Users > Users.
  3. Find the target user and click Authorize Hosts in the Actions column.
    Authorize hosts for a user (1)
  4. On the Authorized Hosts tab that appears, select the target hosts and select Batch Authorize Accounts from the Batch drop-down list.Authorize the accounts of multiple hosts
  5. In the Batch Authorize Accounts pane that appears, specify Accounts.
    Batch Authorize Accounts pane
    Note Currently, you can select only one host account at a time during the authorization of host accounts.
  6. Click Update.