You can use System Manager to add an access-control role and specify the command or command directory that the role's users can access. You can also control the level of access the role has to the command or command directory and specify a query that applies to the command or command directory.