Posted too soon. The answer is that you need a Resource Policy to permit ssh to any host. You then apply that to the appropriate user role. For instance the policy would permit access to *.mycompany.com:22 Then user-defined ssh sessions work correctly. ... View more

We have the same problem on 6.3R2. This is a complete pain. I want to enable certain users to access any host via ssh by defining their own sessions, but this does not work unless there is also an ssh resource profile for the host. ... View more