allow-commands "regular-expression";
[edit system login class]
Specify the commands that members of a login class can use.
If you omit this statement and the deny-commands statement, users can issue only those commands for which they have access privileges through the permissions statement.
regular-expression—Extended (modern) regular expression as defined in POSIX 1003.2. If it contains any spaces, operators, or wildcard characters, enclose it in quotation marks.
See Deny or Allow Individual Commands.
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.