Processing Scope Records

Scope records are stored on the Infostorage database with the storage class of “S.” Only one type code is allowed for scope records in storage class SCP.

Scope list records limit the authority of a privileged CA ACF2 for VM user who has one or more of the following CA ACF2 for VM privileges in his logonid record:

ACCOUNT
AUDIT
CONSULT
LEADER
SECURITY

A privileged user whose logonid record is defined with a SCPLIST attribute can access only the rules, files, and records defined in the SCPLIST field of that attribute. In earlier releases of CA ACF2 for VM, you learned about four different kinds of scope list logonid attributes: DSNSCOPE, LIDSCOPE, UIDSCOPE, and SCPLIST. We recommend that you use SCPLIST because we will not support DSNSCOPE, LIDSCOPE, and UIDSCOPE in future releases.

This chapter provides information on:

Creating scope lists, limiting privileged users' authority
Creating data set, logonid, and UID scopes that limit who a privileged user can write rules for
Setting the mode for processing scope records
Creating, changing, displaying, deleting, and processing scope records.

This section contains the following topics:

SCPLIST: The Logonid Record Scope List Field

Setting Scope Entry Record Mode