Keycyte PAM 3.2 · Administrator Guide
Access Control
Roles decide who may reach which servers and accounts. Access control adds two further controls:
- Approval (just-in-time access). For servers and accounts whose role requires approval, users request access for a time window, and an owner approves or rejects the request. Approved requests and manually created approvals are kept as resource rules.
- Command filters. Commands that users type in SSH sessions, and commands that network devices authorize through TACACS+, are checked against filter patterns and accepted, warned about or rejected.
The pages are under Access Control in the menu: Resource Rules and Command Filters. Command Filters is available only to MASTER users.
This section contains the following topics:
| Topic | Description |
|---|---|
| Access Requests | How users request access and how owners approve or reject requests. |
| Resource Rules | Viewing, creating and changing approvals for users on servers and accounts. |
| Command Filters | Defining command patterns, their action and the scope they apply to. |