Is there any way of restricting the use of the ACCESS subcommand to a subset of users?
The ACCESS command is available to anyone that has the administrative authority to access the rules being checked.
This is restricted by the administrator's authority and scope.
Note: The user issuing the ACCESS subcommand must have access to the rule sets that are processed by the subcommand. Only those rule records that the user normally has CA ACF2 access to can be processed by the subcommand.