Previous Topic: How CA ACF2 for VM Processes Requests for Resource AccessNext Topic: How CA ACF2 for VM Sorts X-RGP Records


X-RGP Record Fields

Only the size of the X‑RGP record limits the combined field lengths. You can define the following fields in an X‑RGP record:

Record ID

Fields

grpname

RESOURCE|GROUP
INCLUDE(entry1,...,entryn)
EXCLUDE(entry1,...,entryn)
TYPE(code)

The fields for resource group records are described below:

grpname

Specifies a 1‑ to 24‑character name of the resource group.

RESOURCE|GROUP

Specifies the function of the record. RESOURCE indicates that the record defines a group of resources. The default value is RESOURCE.

GROUP indicates that the record defines a group of resource groups. Specify GROUP only to define an X‑RGP record that cross‑references other X‑RGP records. See the Cross‑Referencing X‑SGP Records section for an example.

INCLUDE(entry1,...,entryn)

Specifies the resources or group of resource groups that you want to include in the record. This field accepts a maximum of 40 characters per entry. Use a command or a blank to separate each entry.

If you specify RESOURCE, the INCLUDE field specifies the resource names that belong in this resource group. For resource names, this field accepts a maximum of 40 characters per entry. Separate entries using a comma or a blank.

If you specify GROUP, the INCLUDE field specifies the record IDs of the X‑RGP records that this X‑RGP record cross‑references. For record ID entries, this field accepts a maximum of 24 characters per entry. Separate entries using a comma or a blank.

You can specify resource names or record IDs; you cannot specify both in the same X‑RGP record. That is, to use both the RESOURCE and the GROUP functions, you need to define a separate X‑RGP record for each and define a unique record ID for each record.

You can mask resource or record ID entries. Only the size of the record limits the field; that is, the amount of storage that is dedicated to the record determines the maximum size of the INCLUDE field.

EXCLUDE(entry1,...,entryn)

Specifies the resources or group of resource groups that you want to exclude from the record.

If you specify RESOURCE, the EXCLUDE field specifies the individual resources that are excluded from the group the INCLUDE field defines. For resource entries, this field accepts a maximum of 40 characters per entry. Separate entries using a comma or a blank.

If you specify GROUP, the EXCLUDE field specifies the record IDs to be excluded from the set of X‑RGP records that this X‑RGP record cross‑references. For record ID entries, this field accepts a maximum of 24 characters per entry. Separate entries using a comma or a blank.

You can specify resources or record IDs; you cannot specify both in the same X‑RGP record. That is, to use both the RESOURCE and the GROUP functions, you need to define a separate X‑RGP record for each and define a unique record ID for each record. You can mask resource or record ID entries.

You should use the EXCLUDE field only when you mask the INCLUDE field. For example, you have 20 transactions whose names all begin with TR1 and you want to include all but two of these transactions in our resource group. Specify TR1‑ in the INCLUDE field, and specify the full transaction names of the two transactions you want to exclude TR13 and TR17 in the EXCLUDE field.

When you define this field, remember that CA ACF2 for VM performs sort processing from the most specific to the most general. Some examples will clarify this concept. If you specify GRAF***5 in the INCLUDE field and GRAF0105 in the EXCLUDE field, the terminal identified as GRAF0105 is excluded because it more specifically matches the item in the EXCLUDE list.

If you specify GRAF01‑ in the INCLUDE field and GRAF0101 in the EXCLUDE field, the terminal identified as GRAF0101 is excluded because it more specifically matches the item in the EXCLUDE list.

If you specify GRAF0103 in the INCLUDE field and GRAF010* in the EXCLUDE field, the terminal identified as GRAF0103 is included because it most specifically matches the item in the INCLUDE list.

If the INCLUDE field and the EXCLUDE field have an identical entry, the entry is excluded from the group. For example, if the security administrator includes GRAF0120 and GRAF0121 and excludes GRAF0120, GRAF0120 is excluded.

TYPE

Specifies the type code for the resource rule that the X‑RGP record cross‑references. You can only use the TYPE parameter when you specify RESOURCE. You cannot use it if you specify GROUP. You can use the standard type codes that are described in the chapter "About Resource Rules." These type codes must be stored in the resident typelist before you can create the resource group record.