How Does CA ACF2 for z/VM Work? › Defining System Options › ACFSERVE Privilege Records

ACFSERVE Privilege Records

The ACFSERVE command is controlled by structured infostorage records for ACFSERVE privilege records.

ACFSERVE privilege records let you define your own privilege attributes for the ACFSERVE commands.

ACFSERVE privilege records control the ACFSERVE commands. In these records, you must define which users can issue certain ACFSERVE commands and what special privileges they need in their logonid records to issue them. Most ACFSERVE commands require a user to have the SECURITY and ACCOUNT privileges, but some also require the AUDIT privilege.

ACFSERVE privilege records also allow you to specify if a user needs a combination of these privileges. For example, for the ACFSERVE RELOAD FDR command, an authorized user must have both SECURITY and ACCOUNT in his logonid record. For the ACFSERVE ARCHIVE SMF command, an authorized user can have either the SECURITY or ACCOUNT privilege.

You can also specify whether an authorized logonid can be scoped. Finally, you can also specify whether CA ACF2 for z/VM creates an SMF record when the specified user issues the given ACFSERVE command.

For complete information on defining user privileges for ACFSERVE commands, see the Administrator Guide.