Protecting Special Resources › Account Support through CA ACF2 for VM

Account Support through CA ACF2 for VM

With CA ACF2 for VM, you can assign a virtual machine to an account number whenever you issue the LOGON or AUTOLOG commands. You can change the account number when you issue the SET ACCOUNT command. CA ACF2 for VM account validation is integrated into standard CA ACF2 for VM system entry processing and also assumes control whenever you issue the SET ACCOUNT command. This coincides with account support under native VM that occurs during the same instances.

The following terms apply to native VM account support:

Account control statement

An optional entry in the CP directory for a virtual machine that defines primary and alternate account numbers where costs can be charged for the machine.

Primary account number

A one‑ to eight‑character account number in a virtual machine CP directory account statement. During system entry, CA ACF2 for VM automatically assigns this number to the machine by default.

Alternate account numbers

An optional list (up to seven account numbers, one‑to eight‑ characters long) in the virtual machine CP directory account statement. CA ACF2 for VM assigns the machine an alternate account number only if it is explicitly specified during system entry (through the ACCOUNT operand) or if it is changed during the machine's session (through the SET ACCOUNT command).

The CA ACF2 for VM method for employing account validation is significantly different from that of native VM. Specifically, CA ACF2 for VM account validation takes place through resource rules and VMACCT logonid values that replace the CP directory ACCOUNT statements. With CA ACF2 for VM account support, the following features are available:

• You can use three validation modes for implementing account support.
• You can extend the number of accounts available to a single user ID beyond the limit of eight native VM imposes.
• You can assign administrative authority over specific accounts to specific users.