Scenario: A Citrix Administrator would like to grant access to a Junior Citrix Administrator on the Citrix ADC. The administrator would like to grant full access to everything except the following:
✑ Shell
✑ User configuration
✑ Partition configuration
Which preexisting command policy would meet the needs of this scenario?
The sysadmin command policy is designed to grant access to perform all operations on the Citrix ADC except for certain restrictive actions. Specifically, it disallows access to the Citrix ADC shell, user configuration, and partition configuration. This matches the requirements of granting the Junior Citrix Administrator full access except for the specified exceptions.
A sysadmin is lower than a superuser is terms of access allowed on the appliance. A sysadmin user can perform all Citrix ADC operations with the following exceptions: no access to the Citrix ADC shell, cannot perform user configurations, cannot perform partition configurations, and some other configurations as stated in the sysadmin command policy https://docs.citrix.com/en-us/citrix-adc/current-release/system/authentication-and-authorization-for-system-user/user-usergroups-command-policies.html