Restricting CLI commands
Dynamically managing the access level of some CLI commands can help prevent system users from viewing and/or changing sensitive company data.
NoteThis ability is only available on the CLI. It is not possible to restrict command access through the
NAS Manager which already has a read-only user.
Restricting CLI commands on the NAS server can prevent exposure of sensitive data, such as:
- File names and contents
- Directory names and contents
- User names
- Client IP addresses
A restriction is cluster wide and affects all EVSs and tenants.
To use the commands which set and unset restricted access, contact your Hitachi Vantara customer support representative.
Administrators can list the commands that have been restricted using the Supervisor level user-level-override-list CLI command. It also lists the restricted command's current access level.
For example:
See the command man page for further information.