---
title: "Security"
canonical: "https://support.appfire.com/space/CCLI/66716043/Security"
format: markdown
---
> Macro (aura-html)

The CLI macros have very powerful capabilities especially when configured with shared access profiles. Administrators may want to restrict users ability to use all or some of this capability. It is recommended that [Macro Security for Confluence](https://appfire.atlassian.net/wiki/spaces/CMSP) be installed and configured. 

# Macro Security Configuration

The [CLI Macro](https://appfire.atlassian.net/wiki/spaces/CCLI/pages/66716032) and the [Include-remote Macro](https://appfire.atlassian.net/wiki/spaces/CCLI/pages/66716037) are [Macro Security Managed Macros](https://appfire.atlassian.net/wiki/spaces/CMSP/pages/67404857). Once [Macro Security for Confluence](https://appfire.atlassian.net/wiki/spaces/CMSP) is installed and enabled, macro access will be restricted based on your configuration. The following are example conflgurations.

## Unrestricted Access

```
cli=*ANY
cli.profile.*=*ANY
cli.product.*=*ANY
cli.directory.*=*ANY
cli.datasource.*=*ANY
 
include-remote=*ANY
include-remote.profile.*=*ANY
```

## Example Restrictions

```
cli=cli-users
cli.datasource.TestDS=*ANY
cli.datasource.confluenceDS=confluence-administrators
cli.profile.confluence=confluence-administrators
cli.product.*=cli-users
 
include-remote=include-remote-users
include-remote.profile.confluence=confluence-administrators
include-remote.profile.*=*ANY
```