When a user runs commands that are configured to be approved in the control policy associated with the user on a host (associated with this control policy), you receive a notification to approve the commands as an administrator. The commands are executed only after you approve them as an administrator. The commands in the command control list do not require approval. This topic describes how to approve commands as an administrator.

Procedure

  1. Log on to your bastion host. For more information, see Log on to the console of a bastion host.
  2. In the left-side navigation pane, click Command Approval.
  3. On the Command Approval page that appears, perform the following operations as needed:
    • View command details
      You can view the settings of the following parameters of the listed commands: Host, Protocol/Host Account, User/Source IP Address, Command, Requested/Approved At, Approved By, and Status.Command Approval page
      You can select a state from the status drop-down list in the upper-left corner to view all the commands that are in this state. For example, if you select To Be Approved, you can view all the commands that are in this state.Select a state from the status drop-down list
      The following states are supported:
      • All: the commands in all states
      • To Be Approved: the commands to be approved
      • Canceled: the commands of which the execution is canceled
      • Allowed: the commands that are allowed to be executed
      • Rejected: the commands that are disallowed to be executed
    • Allow command execution

      Select the target commands and click Allow in the lower-left corner of the command approval list.

    • Reject command execution

      Select the target commands and click Reject in the lower-left corner of the command approval list.