Citrix Systems CITRIX NETSCALER 9.3 Benutzerhandbuch

• Group Name* (Required for a new group. Cannot be changed for an existing

group.)

• CLI Prompt

• CLI Idle Session Timeout (Secs)

* A required parameter

4. Under Members, select users from the Available Users list and click Add to move

them to the Configured Users list.

5. Click Create or OK, and then click Close.

A message appears in the status bar, stating that the group has been configured
successfully.

Command policies regulate which commands, command groups, vservers, and other
entities that users and user groups are permitted to use.

The Citrix

®

 NetScaler

®

 appliance provides a set of built-in command policies, and you

can configure custom policies. To apply the policies, you bind them to users and/or
groups.

Here are the key points to keep in mind when defining and applying command policies.

w

You cannot create global command policies. Command policies must be bound
directly to NetScaler users and groups.

w

Users or groups with no associated command policies are subject to the default (DENY-
ALL) command policy, and are therefore unable to execute any configuration
commands until the proper command policies are bound to their accounts.

w

All users inherit the policies of the groups to which they belong.

w

You must assign a priority to a command policy when you bind it to a user account
or group account. This enables the NetScaler to determine which policy has priority
when two or more conflicting policies apply to the same user or group.

w

The following commands are available by default to any user and are unaffected by
any command you specify:
help cli, show cli attribute, clear cli prompt, alias, unalias, help, history, quit,
exit, whoami, config, set cli mode, unset cli mode, show cli mode, set cli
prompt, and show cli prompt.

The following table describes the built-in policies.

Citrix NetScaler Administration Guide

27