Using a Common Store for Compliance Assessments
After assessments are stored in a common location, you can create summary reports to compare and contrast the compliance results. For security, you should be running as a user with the Compliance Assessor rights profile only when you send assessments to a common store. For the requirements and the steps, see Configuring Administrators to Run Remote Compliance Commands.
subcommands are performed by agent processes of the Remote Administration Daemon (RAD). These processes run with the full rights available to the user. However, not all subcommands run with full rights. Prefix compliance
commands that operate on a remote node with pfexec
to assure that the operation is performed with the full rights available to the user.