Reference Guide › Utilities › Services and Daemons in Detail › CA ControlMinder Task Delegation Service

CA ControlMinder Task Delegation Service

Valid on Windows

The task delegation service (SeSudo.exe) grants the required rights and privileges to ordinary users to enable them to perform administrative tasks while not being members of Windows high privileged groups for example the Administrators group.

When a user attempts to perform an administrative task, for example start or stop a Windows service, the task delegation service does the following:

1. Communicates with the CA ControlMinder engine service to verify that the user has is authorized to perform the task.
2. The CA ControlMinder engine service does the following:
   1. If the user is authorized to run the task, the CA ControlMinder engine service authorizes the task delegation service to run the task.
   2. If the user is not authorized to run the task, the CA ControlMinder engine blocks the attempt.

You run the CA ControlMinder task delegation service from a command-prompt window using the sesudo command. This command has the following format:

sesudo [-do [record] [parameters]| -list | -h]

-do [record] [parameter]

Specifies to execute the commands that are embedded in the [record] field with additional parameters

-list

Specifies to display a list available records that the user can execute

-h

Specifies to display the command help menu