Securing CA NSM Objects › Phase 3: Create Rules for Production in WARN Mode › How CAISSF Scoping Options Work › CAISSF Scoping Options › CAISSF Command Scope (Windows)

CAISSF Command Scope (Windows)

Scoping of command asset types provides validation against Security Management policies based on the specified command. Using command scoping, access to CA asset types can be limited to specific operations. For example, a user can create new user accounts, but cannot update existing accounts.

Command scoping rules are specified for asset types having a suffix of CM. For example, use CA‑CALENDAR‑CM to apply a command scoping rule to the CA‑CALENDAR asset type. Command scoping is valid only on Windows platforms.