selang Reference Guide › selang Commands › selang Commands Reference › deploy Command—Initiate Policy Deployment

deploy Command—Initiate Policy Deployment

Valid in the AC environment

Use the deploy command to initiate policy deployment. The command executes selang commands stored with the RULESET object that is associated with the POLICY object you are deploying. These are policy deployment commands.

Important! We strongly recommend that you use the policydeploy utility to deploy a stored policy. The deploy command only executes part of the policy deployment and does not update the DMS when deploying a policy to an endpoint.

To run the deploy command, you need to have:

• Sub-administration rights for the POLICY, HNODE, and RULESET classes on each database in the hierarchy below the database where you deploy the policy.
• Appropriate sub-administration rights on each database in the hierarchy below the database where you deploy the policy.

  These are the permissions necessary to execute the selang commands that form the policy on each of these computers.

  For example, you'll need sub-administration rights for the FILE class if you are creating a new file resource:

  nr FILE /inetpub/* defaccess(none)
  

Note: For more information about policy deployment, see the Enterprise Administration Guide.

This command has the following format:

deploy POLICY name#xx

name#xx

The name of the POLICY object (policy name and version number) for the policy you want to deploy.

More information:

policydeploy Utility—Manage Enterprise Policy Deployment

deploy- Command—Initiate Policy Removal