There shouldn't be a need to access the CLI of your Orchestrator other than for upgrading and Linux maintenance.
Almost all of the configuration of your appliances is GUI based through the templates. Which ACL's are you trying to replicate?
Have you had a look at the REST-API capabilities?? (Type "REST" in the menu search)
------------------------------
Jan-Willem
------------------------------