Scenario: A Citrix Administrator gives permissions to team members to access their own admin partition. This will allow them to add resources for different departments and manage them without making…

Question

Options

• AThe team member does NOT have shell access by design.
• BThe team member does NOT have permission to use the CLI.
• CThe team member is NOT using the CLI correctly.
• DThe team member needs to troubleshoot the issue from the GUI.

• A
  82% (36)
• B
  2% (1)
• C
  11% (5)
• D
  5% (2)

Explanation

Option A is correct because aaad.debug is a shell-level utility, not a standard CLI command - it runs directly in the Citrix ADC Unix shell (bash). Admin partition administrators are deliberately restricted from shell access by design, regardless of how many permissions they hold within their partition; this is a security boundary that cannot be overcome through partition-level privilege grants alone.

Why the distractors are wrong:

• B is incorrect because the team member does have CLI access - the question explicitly states they have full permissions on the admin partition and are using the CLI.
• C is incorrect because there is no syntax error or misuse described; the failure stems from an access restriction, not user error.
• D is incorrect because aaad.debug is a shell tool and is equally unavailable from the GUI - switching interfaces doesn't resolve the underlying access limitation.

Memory tip: Associate aaad.debug with the word shell - if you remember "shell = separate privilege tier, always above partitions," you'll immediately recognize that any shell-level tool is off-limits to partition admins by design, no matter their partition role.

No community discussion yet for this question.