Help Center/ Cloud Bastion Host/ User Guide/ Managing Service Tickets/ O&M Personnel Operations/ Submitting a Command Approval Ticket
Updated on 2025-12-23 GMT+08:00
View PDF
Share

Submitting a Command Approval Ticket

You can enable dynamic authorization of operations on Linux server. This enhances the restriction of critical operations.

During O&M on Linux hosts, if an operation command triggers the command rules for dynamic approval, the system automatically intercepts the operation command and generates a command approval ticket. The command approval ticket is sent to the administrator. After it is approved by the administrator, the user can obtain the permission to run the operation command on the Linux host.

Figure 1 Example of command interception

This topic describes how to manage command approval tickets.

Constraints

A bastion host can intercept sensitive operation commands and generate tickets only for Linux hosts using the SSH or Telnet protocol.

Prerequisites

  • You have the management permissions for the Command Approval Ticket module.
  • Command interception has been triggered, and a command approval ticket has been generated.

Procedure

  1. Log in to your bastion host.
  2. Choose Tickets > Command Approval Ticket.

    Figure 2 Command Approval Ticket

  3. Submit a ticket.

    Command approval tickets can be submitted automatically or manually. For details, see Configuring Basic Ticket Settings.
    • If the automatic submission mode is selected, the system automatically submits the ticket to the administrator for approval.
    • If the manual submission mode is selected, click submit to send it to the administrator for approval in the Operation column on the Command Approval Ticket list page.
    • If the ticket is rejected by the administrator, you can modify the ticket information and submit it again.
      Figure 3 Submitted ticket

Related Operations

  • Modifying a ticket: To view or modify the information about a ticket, locate the row of the ticket and click Manage in the Operation column to go to the ticket details page.

    For tickets in the approving status, you can only view the details but cannot modify the content. Only the ticket in the Revoked or Not submitted state can be modified.

  • Withdrawing a ticket: To modify a submitted ticket, locate the row of the ticket and click Withdraw in the Operation column to cancel the ticket. Then, the ticket status changes to Revoked.
  • Deleting a ticket: If a submitted ticket has expired, locate the row of the ticket and click Delete in the Operation column to delete the ticket. You can also select multiple tickets and click Delete in the lower left corner of the list to delete the selected tickets all at once.

    Deleted tickets cannot be recovered. Exercise caution when performing this operation.

Follow-up Operations

After a user submits a ticket, the administrator will receive a notification in the message center. The administrator can check ticket details there. The ticket will be displayed on the Ticket approval page. On this page, the administrator can approve, reject, or revoke the authorization for the ticket. For details, see Viewing and Approving Tickets.

  • If the administrator approves a ticket, the user then obtains the command operation permissions within the authorization scope and period.
  • If the administrator rejects a ticket, the user cannot obtain the corresponding permissions.
  • If the administrator revokes the authorization for a ticket, the operation commands allowed by the ticked will be intercepted then.
Parent topic: O&M Personnel Operations