| Allow the system administrator to classify his own security levels and promote or demote users from one level to another | |
| Maintain access rights in a single, easy-to-control configuration file for the entire system | |
| Assure that access rights are always up-to-date | |
| Incorporate powerful scripts into simple command macros | |
| Scan all system directories and report and/or clear any deviation from the standard configuration | |
| Work with standard VOS ACLs and DCLs (Access Control Lists/Default Control Lists) |