During real-time monitoring, if a user performs an unauthorized or high-risk operation, block their O&M sessions immediately. When you block a user's sessions, the user cannot perform O&M operations on any host until the blocking period expires.
Real-time database sessions cannot be blocked.
Prerequisites
Before you begin, ensure that you have:
Access to the Bastionhost console
Block an O&M session
Log on to the Bastionhost console. In the top navigation bar, select the region where your bastion host resides.
In the bastion host list, find the bastion host you want to manage and click Manage.
In the left-side navigation pane, choose O&M Audit > Real-Time Monitoring.
In the session list, find the session you want to block and click Interrupt Sessions.
What's next
To configure how long a user remains locked after their sessions are blocked, see Configure O&M settings. The Duration to Lock Users Upon Session Blocking setting controls the blocking period.