selang Reference Guide › The selang Command Language › selang Command Authorization

selang Command Authorization

To use selang commands that change records in the AC or native operating system (native OS) environment, you must have sufficient authority. For most commands, one of the following conditions must be met:

• You are the owner of the resource.
• You have the ADMIN attribute.
• The resource record is within the scope of a group in which you have the GROUP‑ADMIN attribute.
• You have CREATE or MODIFY access authority in the ACL of the record in the ADMIN class.
• (Windows) If your installation only permits management of the native Windows environment, you are a member of the CA ControlMinder Administrators group in the Windows database.
• (UNIX) If your installation only permits management of the native UNIX environment, you are a member of the CA ControlMinder Administrators group in the security files of the local UNIX host.

Note: Exceptions to these general rules are noted in the description of each command.