Reference Guide › Utilities › sesudo Utility › sesudo Utility—Execute a Command as Another User on Windows

sesudo Utility—Execute a Command as Another User on Windows

Valid on Windows

The sesudo utility executes commands for one user with the permissions of another user. The sesudo utility borrows the permissions of another user (the target user) to perform one or more commands. This allows regular users to perform, for example, actions-such as the mount command-that require superuser authority.

The rules governing user authority to perform commands in this way are defined as access rules in the SUDO class. A record in the SUDO class contains a command script, and can specify both users who are permitted to run the script with sesudo and forbidden users.

Note: The user executing the program invoked by sesudo cannot be changed from CA ControlMinder for Windows.

This command has the following format:

sesudo {-h|-list|-do record [params]}

‑h

Displays the online help screen.

‑list

Lists sesudo commands you can execute. These are the SUDO records defined in the CA ControlMinder database that you are authorized to execute.

-do record [params]

Specifies that sesudo executes a command as another user.

record

Specifies the name of the SUDO class record the security administrator gave to the command you want to execute using the sesudo utility.

params

(Optional) Specifies the parameters you want to send to the command you are executing.