Pending Review

remove requirement for remote diagnostic toolkit

Steven_VIS 2 years ago updated by Caitlin M Barnes (Product Manager) 2 years ago 1

in order to use the remote diagnostic toolkit or execute commands in backstage we have to have the security control RemoveCommandFromSession allowed. This allows techs to remove commands they have issued from the script history. We need that history to remain and therefore would like to request that this no longer be required.

we need the transparency for supervisors to review as evidence that a team member did / did not execute commands.

Hi Steven, 

The RemoveCommandFromSession is there to clean up the commands run as part of the Remote Diagnostic Toolkit so they don't blow up the database. From an auditing perspective, the history of these commands and whether they're deleted is in the Audit Log. If someone deletes a command it's EventAttributes changes to 'UserDeleted'.