gLExec is a program that acts as a light-weight 'gatekeeper'. it takes Grid credentials as input, and takes the local site policy into account to authenticate and authorize the credentials. It will then switch to a new execution sandbox and execute the given command as the switched identity. gLExec is also capable of functioning as a light-weight control point which offers a binary yes/no result in logging-only mode.