To grant a Junior Administrator full access except shell, user configuration, and partition configuration, which pre-existing command policy would meet the needs?

• A. Operator
• B. Sysadmin
• C. Network
• D. Superuser

Answer: (B)

In Citrix ADC, access to the CLI is controlled by built-in command policies that define what commands a user can run. When you want someone to have almost full administrative capability but still keep certain sensitive areas off-limits, you evaluate which policy provides broad permissions while excluding the restricted areas.

The Sysadmin policy is designed to cover wide-ranging administrative tasks across the appliance, enabling extensive configuration and management capabilities that a junior administrator would handle. At the same time, it is structured to avoid enabling access to high-risk areas like the shell, certain user-management operations, and partition configuration, which aligns with the requirement to grant full access except those specific functions.

Other options either provide only limited operational capabilities (Operator), focus on networking-specific tasks (Network), or grant control over everything, including restricted areas (Superuser). Therefore, for giving near-full admin access while excluding shell, user configuration, and partition configuration, the Sysadmin policy is the best fit.