The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Viewing authorization rules using the CLI

Prev Next

Use the commands in this section to view authorization rules.

To view authorization rules:
  1. Log in to the Central Management System CLI.

  2. Go to CLI enable mode:

    cm-hostname > enable
  3. View authorization rules:

    cm-hostname # show aaa authorization access-groups rules

Example

The following example shows the authorization rules configured on the cm-02 appliance.

cm-02 # show aaa authorization access-groups rules
---------------------------------------------------------
#       AAA Authorization Access-groups Rules : Enabled
---------------------------------------------------------
# Rule         Statements
---------------------------------------------------------
 # 1            Match LDAP Group         : infosec
                Grant Access Groups      : nx-alerts

 # 2            Match LDAP Group         : infosec-hq
                Grant Access Groups      : ex-alerts

 # 3            Match Local Users        : Joe Matt Sue
                Grant Access Groups      : nx-alerts ex-alerts