Not every command is available to every user. Some commands are restricted to those who have the authority (capability) to use them. A handful of commands are available only to the person using the system console (the system operator or the system administrator).
Restricted commands |
 |
The restrictions on some commands are an extension of the same capabilities that apply to groups, accounts, and users.
The NEWUSER command is restricted. This command allows an account manager (AM capability) to define new users (user names) who will be permitted to log on to an account.
The NEWACCT command creates (names) new accounts. Only users who have system manager (SM) capability have the authority to execute NEWACCT.
How will you know whether you have authority to use a particular command? If you try to use a command that exceeds the capabilities assigned to you, the operating system will inform you through an error message on your terminal screen. There are no penalties for experimenting.
Console commands |
|
A small number of commands is tightly restricted. These commands are critical to the efficient management of the computer and its resources.
The ALLOW command permits a system operator or a system manager to grant or deny the use of other, restricted commands. Such a command has the potential for misuse, and so the system permits execution of ALLOW only at the system console.
Again, there are no penalties for attempting to use ALLOW or the other console commands. The system will simply inform you that such commands are reserved for execution at the console.
