sshAccessPolicies.name=SSH Access Policy
sshAccessPolicies.names=SSH Access Policies


servers.name=Servers
notes.name=Notes
accounts.name=Principals
constraints.name=Constraints
policy.name=Policy

enabled.name=Enabled
enabled.desc=You may optionally disable this policy to prevent it being used by turning off this status. 

name.desc=The name of this access policy.

matchServers.name=Servers
matchServers.desc=The Servers that this policy applies to.

matchTags.name=Match Server Tags
matchTags.desc=This policy will apply to any Server that contains one or more of the following Tags.

notes.desc=Private notes for this policy.
options.name=SSH Options

principals.name=Principals
principals.desc=The Principal names of the accounts on the Server that users assigned to this policy will be able to access.

sourceIPConstraints.name=IP Constraints
sourceIPConstraints.desc=Source IP constraints that will be embedded into the SSH certificates issued under this policy.

ttl.name=TTL
ttl.desc=The time-to-live in minutes of certificates issued under this policy.

expiryDate.name=Expiry Date
expiryDate.desc=The date this policy expires.

forceMFA.name=Force MFA
forceMFA.desc=Users will be forced to perform secondary authentication via the Web before being issued keys under this policy.

forceCommand.name=Force Command
forceCommand.desc=Force a specific command to be executed when the user logs in using certificates issued under this policy.

priority.name=Priority
priority.desc=A value that determines which policy is used when multiple policies match. The lower the value, the more priority it has.

users.name=Users
users.desc=The Users assigned to this policy.

roles.name=Roles
roles.desc=The Roles assigned to this policy.

permitX11.name=X11 Forwarding
permitX11.desc=Allows the user to forward X11 from the server to their local device.

permitForwarding.name=Port Forwarding
permitForwarding.desc=Allow the user to forward TCP ports to/from their device and the server.

permitAgentForwarding.name=Agent Forwarding
permitAgentForwarding.desc=Forward agent requests from the server session back to the users device.

permitPty.name=Enable PTY
permitPty.desc=PTY allocation should be permitted.

permitUserRc.name=User RC
permitUserRc.desc=Specifies whether any ~/.ssh/rc file is executed.

additionalPolicy.name=Additional Policy
additionalPolicy.desc=When MFA is forced use this policy to authenticate the user.

requirePushAuth.name=Authorize via App
requirePushAuth.desc=Access to Servers under this policy requires an authorization via the SSH Teams Authorization App.

biometricPolicy.name=Bio-metric Policy
biometricPolicy.desc=Determines if a user needs to perform a bio-metric authentication in the Authorization App during the authorization process.
sshteam-authorize.name=Permanent Device Authorization

allowPermanentAuthorizations.name=Allow Permanent Authorizations
allowPermanentAuthorizations.desc=User devices that have a permanent authorization (e.g. headless or automated clients) can access the servers under this policy. The Force MFA option will be ignored for permanent authorizations, however, push authentication will still be required if enabled under this policy.