Authentication: You can specify user login behavior for commands designed to run on secure, remote target servers. You can specify login credentials to be used as part of the command, or set parameters that prompt users to enter their user name and password when they run the command.
Authorization: You can set up fine-grained access control lists (ACLs) to specify which ArcSight Console users have permissions to view, run or edit different commands. See Managing Permissions.