Submitting an ACL Ticket

Prerequisites

You have the management permissions for the ACL Ticket module.

Procedure

1. Log in to your bastion host.
2. Choose Tickets > ACL Ticket to go to the ACL ticket page.
3. Click New in the upper right corner of the page.
   In the displayed New ACL ticket page, configure basic information.

   Table 1 Parameters for configuring an ACL ticket

   Parameter	Description
   Operation Time	Specifies the time period for accessing the resource. The start time and end time must be set.
   File Transfer	File transfer permissions, including uploading and downloading files.
   Options	Whether to enable the functions in the session window when a web browser is used for O&M. File Manage: Permissions to manage files or folders. If Upload or Download is selected for File transfer, File Manage must be enabled. uplink clipboard and downlink clipboard: Permissions to use the clipboard function on hosts with Protocol set to RDP. Watermark: Permissions to display the watermark of the user login name in the operation session window. Keyboard Audit: This function records the information entered through the keyboard. Kiosk: For applications that can be managed through a browser, you can use this function to hide the address bar and disable F12, right-click, and the browser toolbar. You can use F12 instead of Ctrl to implement shortcut key operations.
   Remarks	(Optional) Briefly describe the reason for applying for the resource access control permission or other information.

4. Click Next and select an account for which the permissions are applied.
5. Click OK to submit the ticket.

   After the administrator approves the ticket, you obtain the access permission for the resources.

Related Operations

• Modifying a ticket: To view or modify the information about a ticket, locate the row of the ticket and click Manage in the Operation column to go to the ticket details page.
  

  For tickets in the approving status, you can only view the details but cannot modify the content. Only the ticket in the Revoked or Not submitted state can be modified.

• Withdrawing a ticket: To modify a submitted ticket, locate the row of the ticket and click Withdraw in the Operation column to cancel the ticket. Then, the ticket status changes to Revoked.
• Deleting a ticket: If a submitted ticket has expired, locate the row of the ticket and click Delete in the Operation column to delete the ticket. You can also select multiple tickets and click Delete in the lower left corner of the list to delete the selected tickets all at once.
  

  Deleted tickets cannot be recovered. Exercise caution when performing this operation.

Follow-up Operations

After a user submits a ticket, the administrator will receive a notification in the message center. The administrator can check ticket details there. The ticket will be displayed on the Ticket approval page. On this page, the administrator can approve, reject, or revoke the authorization for the ticket. For details, see Viewing and Approving Tickets.

• If the administrator approves a ticket, the user then obtains the command operation permissions within the authorization scope and period.
• If the administrator rejects a ticket, the user cannot obtain the corresponding permissions.
• If the administrator revoke the authorization for a ticket, the user's corresponding permissions become invalid immediately.