Create a sudo entitlement

To create a sudo entitlement:

  1. Open the Advanced Server Access dashboard from an admin account.
  2. Click Entitlements.
  3. Click Create Sudo Entitlement. The Create Sudo Entitlement window appears.
  4. Enter a name and description for the entitlement in the Entitlement Name and Description fields.
  5. Select the type of sudo entitlement to create from the dropdown. This is one of Executable, Raw, or Directory. If you're configuring an Executable command, you must specify which kinds of arguments the command will take by choosing one of: Any arguments, No arguments, or Specific arguments. If you select Specific arguments, enter the arguments to allow in the field that appears.
  6. Enter the command to add in the field beside the sudo entitlement command type pull-down box.
  7. Optional. Add additional commands by clicking Add Another Command and repeating the previous step.
  8. To access advanced configuration options for sudo entitlements, expand Advanced Configuration. These settings apply to all commands defined for a sudo entitlement.
  9. To run all of the commands defined in the sudo entitlement as a specific non-root user, enter the username in the Run As field.
  10. Clear Enable NOPASSWD if you do not want the user to be able to run sudo without a password. This option is selected by default, allowing users to run sudo without a password.
  11. Select Enable NOEXEC if you do not want to allow commands to execute child processes.
  12. Select Enable SETENV if you want to allow the overriding of environment variables to commands.
  13. You can further refine the environment variable settings for a sudo entitlement by setting the env_keep += and env_keep -= arguments. See your system's sudo documentation for details.

Related Topics