With [ControlTier 3.6][1], a new mechansim for controlling access to Jobs in the CtlCenter and Modules in ctl-exec was introduced to provide additional flexibility and maintainability when securing ControlTier.
Instead of using a strict xml schema, a markup language is used so new tags can be introduced in subsequent releases while preserving backwards compatibility.
Another benefit is that multiple aclpolicy files can be stored in the same directory, helping the management of each set of rules. This reduces the complexity of each file. The default path is $CTL_BASE/etc