SET COMMANDAPPROVAL (Specifies whether command approval is required)
Use this command to specify whether approval is required for an administrator to run restricted commands.
Privilege class
To issue this command, you must have system privilege.
The commands in the following list are considered restricted commands. The set of restricted commands is predefined by the server and cannot be customized. When SET COMMANDAPPROVAL is set to ON, restricted commands that are issued are placed into a pending state and will not run until they are approved by an approval administrator. Pending commands that are not approved within 72 hours are automatically rejected. When command approval is enabled, the server does not validate the syntax or evaluate the parameters of restricted commands unless otherwise noted in the following list. When a restricted command is issued, the command is automatically placed into the queue of pending commands, regardless of the syntax.
- ACTIVATE POLICYSET
- AUDIT CONTAINER
- AUDIT VOLUME
- DEACTIVATE DATA
- DECOMMISSION NODE
- DECOMMISSION VM
- DELETE BACKUPSET
- DELETE FILESPACE
- DELETE MGMTCLASS
- DELETE RETSET
- DELETE VOLUME
- RELEASE RETSET
- SET ACTLOGRETENTION
- SET APPROVERSREQUIREAPPROVAL (only for the OFF parameter value)
- SET COMMANDAPPROVAL (only for the OFF parameter value)
- SET SUMMARYRETENTION
- UPDATE BACKUPSET
- UPDATE RETSET
The UPDATE RETSET command is held for command approval only if the retention period that is specified in the RETENTION parameter is reduced. If the retention period is increased, the command is not held for approval.
Syntax
Parameters
- ON
- Specifies that an approval administrator must authorize the use of restricted commands before they can be processed. Approval administrators are specified by using the CMDAPPROVER parameter on the UPDATE ADMIN and REGISTER ADMIN commands.
- OFf
- Specifies that approval for restricted commands is not required. This is the default value. If command approval was previously enabled, all pending commands are automatically rejected when you issue the SET COMMANDAPPROVAL OFF command.
Example: Specify whether to require command approval
Set command approval to ON to require approval for restricted commands to run.set commandapproval on
Related commands
Command | Description |
---|---|
APPROVE PENDINGCMD | Approve commands that are pending approval. |
QUERY PENDINGCMD | Display a list of commands that are pending approval. |
REGISTER ADMIN | Defines a new administrator. |
REJECT PENDINGCMD | Reject commands that are pending approval. |
SET APPROVERSREQUIREAPPROVAL | Specifies whether commands issued by approval administrators require approval. |
UPDATE ADMIN | Changes the password or contact information associated with any administrator. |
WITHDRAW PENDINGCMD | Withdraw commands that are pending approval. |