Defining a restricted shell command right
You can also use command rights to strictly control which commands certain users can execute. In a restricted shell environment, users can only execute the specific commands and command-line options that are explicitly allowed. For example, you might want to grant some users permission to run a specific Centrify command-line program, such as adinfo, without allowing them to run any other command-line programs on some computers.
Users who are assigned to a role with the restricted shell environment are not be able to run any other commands, including informational commands such ls, ps, and whoami, unless you explicitly include them in the command right. You are not required to explicitly add basic navigational commands, such as cd and pwd, to the command right.