Protecting Special Resources › The GRPLOGON Privilege: Logging onto Group Machines › Logging on as a Group User

Logging on as a Group User

This is the common implementation when using a group virtual machine.

LOGON maint
ACFpgm263R Enter your CA‑ACF2 logonid
userlgn
ACFpgm244R Enter CA‑ACF2 password
userpwd

After entering LOGON MAINT to use the MAINT group machine, the group user supplies his own logonid and password, not MAINT's. After he accesses the system, CA ACF2 for VM validates all accesses as if the group virtual machine were logged on as a regular user. That is, it validates normal data and resource accesses against the group machine, not the group user. CA ACF2 for VM creates SMF records for the group machine. SMF records contain information that identifies the group user. The user who logged onto the group virtual machine is identified in the CA ACF2 for VM reports. This enforces individual accountability.