Previous Topic: Part II: Defining User Privileges for ACFSERVE CommandsNext Topic: ACFSERVE Privilege Record Names


ACFSERVE Privilege Record Fields

All ACFSERVE privilege records have the same field names. These fields are defined below.

AUTH(privilege list)

Specifies the CA ACF2 for VM or site‑defined privilege field that must be in the logonid of users who can issue the specified ACFSERVE command. For example, you can specify a privilege list of AUTH(SECURITY,ACCOUNT) in the RESET record. This means that the user must have the SECURITY or ACCOUNT privilege in his logonid record to issue the ACFSERVE RESET command (assuming AUTLOGIC is defined as OR). If you specify AUTH without any values, any user can issue the indicated ACFSERVE command.

AUTLOGIC(AND|OR)

Specifies the type of logical test applied between the AUTH field's privilege list and the user's logonid. AND means that all of the AUTH field's privilege list entries must be in the logonid record of users who can issue the specified ACFSERVE command. OR means that any one of the AUTH field's privilege list entries must be in the logonid record of users who can issue the specified ACFSERVE command.

SCOPED|NOSCOPED

Specifies whether a logonid with AUTH(SECURITY) can be scoped or not. This field only applies to the CA ACF2 for VM SECURITY privilege. SCOPED means that a scoped security administrator can issue the specified ACFSERVE command. NOSCOPED means that only an unscoped security administrator can issue the specified ACFSERVE command.

LOG|NOLOG

Specifies whether CA ACF2 for VM always creates an SMF record for the specified ACFSERVE command. In the case of an authority violation, CA ACF2 for VM always writes an SMF record.