KeyCapture logging is authorized for specific users by granting them the proper rights-ids. For KCAP/TRACK/ the rights ID is KCAP$INPUT_LOGGER. To add these identifiers to the system rights database use the AUTHORIZE commands ADD/IDENTIFIER KCAP$INPUT_LOGGER. To then grant these identifiers to specific users, use an AUTHORIZE command in the form of GRANT /IDENTIFIER KCAP$INPUT_LOGGER J_JONES A program and command file are provided in the KeyCapture distribution to help the system manager set up the KCAP$INPUT_LOGGER rights-id on the system. See KCAP$LOCATION:KCAP_GRANT_ID.COM for details. GREAT CARE SHOULD BE USED WHEN GRANTING USERS THE KEYCAPTURE RIGHTS-ID, SINCE THIS ALLOWS LOGGING OF NON-ECHOED INPUT. FOR THIRD-PARTY SOFTWARE, IT IS POSSIBLE THAT THIS NON-ECHOED INPUT COULD CONTAIN PASSWORDS.