This topic provides answers to some frequently asked questions about Bastionhost control policies.
After I modify a control policy, the policy does not take effect. Why?
After you modify a control policy that is associated with an asset, you must re-log on to the asset by using your bastion host for the policy to take effect. For more information, see O&M overview.
What are the execution rules of control policies?
If multiple control policies that you add are associated with the same host or user, only one control policy takes effect when you perform O&M operations. The control policy that has the highest priority is executed first. If the control policies have the same priority, the policies are executed in the order in which they are created. For more information about how to modify a control policy, see Manage control policies.
If you configure both the Command Control and Command Approval parameters when you add a control policy, the Command Control parameter is executed first.
How do I enable a control policy after I configure the control policy?
After you configure a control policy, you must associate the policy with both assets and users. Then, the policy takes effect on O&M sessions. For example, if you want to restrict User A from performing operations on all authorized assets, you must associate the control policy with User A and select Takes Effect on All Assets. For more information, see Configure a control policy.
Can I review O&M applications on a mobile phone?
Yes, you can review O&M applications on a mobile phone. You can use a browser on your mobile phone to log on to the Alibaba Cloud official website to review O&M applications.
You cannot review O&M applications by using the Alibaba Cloud app.