Endpoint Administration Guide for UNIX › Managing Endpoints › What Is CA Access Control? › Expanding Native Security › Administration Rights for Regular Users

Administration Rights for Regular Users

CA Access Control lets you grant ordinary users (that is, non-administrators) the necessary rights and privileges so that these users can perform administrative tasks without being members of the Administrators group. The ability to delegate tasks by granting administrative privileges in this granular way is a significant advantage of CA Access Control.

• A record in the SUDO class stores a command script to allow users to run the script with borrowed permissions.
• The data property value is the command script. This value can be modified by adding to it optional script parameter values.
• Each record in the SUDO class identifies a command for which a user can borrow permissions from another user.
• The key of the SUDO class record is the name of the SUDO record. This name is used instead of the command name when a user executes the commands in the SUDO record.