How to Grant Permissions to Users

Overview

Administrators can manage templates for restricted commands that are not allowed on servers and can directly grant or revoke access permissions to servers. Command restriction is string-based, and support for regular expressions is also available.

Setting Up a Command Template

STEP 1 Go to the Command Templates menu and click Create Template. Enter the following details:

• Name: Enter a name to identify the template.
• Description: Enter additional information about the template.

STEP 2 Select whether to allow or deny commands registered in the command template.

• Deny: Configure the commands to be denied. Any commands other than the configured ones will be allowed.
• Allow: Configure the commands to be allowed. Only the configured commands will be permitted, and all others will be denied.

STEP 3 Commands(SSH): Configure the command policy for commands executed through the web terminal on the server.

• Keyword: Commands can be entered as keywords.
• RegEx: Commands can be entered as regular expressions.

STEP 4 Commands(SFTP): Configure the functionality policy for commands executed via web SFTP or FTP on the server.

STEP 5 Click the Save button at the bottom right to finalize the configuration.

Granting a Direct Permission

STEP 1 Go to the Access Control menu and select the user or group to whom you want to grant the privilege.

STEP 2 Click the Grant Permissions button.

STEP 3 Choose the server group from the left-hand list for which you want to grant access permissions.

STEP 4 The associated servers and accounts within that group will appear on the right-hand side. Select the server and accounts you wish to grant permissions to.

1. On the right-hand side, select the server(s) you want to grant permissions for.
2. At the bottom right, select the account(s) that can access the selected server(s).

STEP 5 Click the Next button.

STEP 6 Set the following policy, then click the Grant button to finalize the permission assignment.

• Expiration Date: Set an expiration date for the access permission (default is 1 year, max is 1 year).
• Protocols: Specify the protocol(s) used for server access.
• Command Template: Set restricted command sets for server access. Click Command Template Details to review the specific restrictions.
• Access Start Time: Set the start time for server access.
• Access End Time: Set the end time for server access.
• Access Weekday: Choose the days of the week when access is allowed.
• IP Addresses: Define the IP addresses from which access is allowed.
• Command Audit: Determine whether the commands used in the connected session should be logged through this permission.
• Command Detection: Determine whether the detection of forbidden commands within scripts and aliases should be enabled when called.
• Proxy Usage: Set whether the QueryPie Agent allows server access under this Permission.
• Max Sessions: Limit the number of concurrent sessions a user can have on a server.
• Session Timeout (minutes): Set the duration (in minutes) after which an inactive session will be terminated.