Privilege elevation services
The privilege elevation service provides role-based authorization to enable you to perform administrative tasks on specific computers during specific periods of time. You can configure role defintions for UNIX computers, Windows computers, or to apply to both UNIX and Windows computers. However, the specific types of rights available are unique for UNIX and Windows computers. For example, you can specify command line rights for UNIX computersthat can ne executed in a standard shell or within a restricted shell environment. For Windows computers, you can elevate user rights for a desktop or a specific application or service.