Previous Topic: Authorize Users to Work in CA ChorusNext Topic: Sample: Authorize a User with CA Top Secret


Sample: Authorize a User with CA ACF2

Use this procedure to identify the users that can log in to CA Chorus and can use specific disciplines. Additionally, you can authorize users to do the following tasks:

Note: The commands in this procedure are samples. For detailed information about using these commands, see the CA ACF2 Administration Guide.

To define user access permissions, enter the following commands:

SET RESOURCE(MFC)
RECKEY CHORUS ADD(resource-name UID(uid-of-userid1) SERVICE(READ) ALLOW)
RECKEY CHORUS ADD(resource-name UID(uid-of-userid2) SERVICE(READ) ALLOW)
...
RECKEY CHORUS ADD(resource-name UID(uid-of-useridn) SERVICE(READ) ALLOW)
resource-name

Identifies the CA Chorus resource that the user is permitted to access.

ROLE.DB2DBA

Controls access to CA Chorus for DB2 Database Management functions. CA Chorus Infrastructure Management for Networksand Systems offers data from CA Insight, but the resource is not required for this discipline.

ROLE.INFRASTRUCTURE

Controls access to CA Chorus Infrastructure Management for Networksand Systems functions.

ROLE.SECURITY

Controls access to CA Chorus for Security and Compliance Management functions (UI and batch).

ROLE.SDKinstance

Controls access to an SDK. CA Chorus can support multiple SDKs. Work with the system administrator and application developer to define and share this name. We recommend that the application developer use this name to build the files necessary to support the SDK. For more details, see the Software Development Kit User Guide.

instance

An alphanumeric string to identify this resource for your SDK.

ROLE.STORAGE

Controls access to CA Chorus for Storage Management functions.

SETTINGS.KNOWLEDGECENTER

Indicates that the user can index content in the Knowledge Center.

SETTINGS.AUTOREFRESH

Indicates that the user can use the auto-refresh option.

uid-of-userid1, uid_of_userid2, ..., uid_of_useridn

Identifies the UID of the CA Chorus user requesting access.

READ

Indicates that the user has READ access.

The user has access to the specified resources and can log in and work in CA Chorus.

Example

The following commands grant user ABC1 the following abilities: