topic Re: Custom Gaia role with custom extended commands in API / CLI Discussion

Custom Gaia role with custom extended commands

eliadr — Thu, 09 Jun 2022 15:06:14 GMT

Hi all.

I'm thinking about giving some access for basic troubleshooting to our t1/2 support techs.
Found this:https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_ScalablePlatforms_Gaia_AdminGuide/Topics-SP-Gaia/User-Defined-Extended-Commands.htm

Is there a way to let them use only specific parameters with these commands?

e.g. let them use only "fw monitor" and block all other "fw ..." functions.
Maybe create beforehand some script that only do "fw monitor"?
Anyone tried it?

Thanks.

Re: Custom Gaia role with custom extended commands

PhoneBoy — Fri, 10 Jun 2022 22:00:05 GMT

Create a script with the relevant command and provide access to that via extended commands.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk86583&partition=Basic&product=All

Re: Custom Gaia role with custom extended commands

eliadr — Sun, 12 Jun 2022 08:07:15 GMT

Thanks PhoneBoy for the confirmation.