Securing CA NSM Objects › Phase 3: Create Rules for Production in WARN Mode › How CAISSF Scoping Options Work

How CAISSF Scoping Options Work

Using the CAISSF Scoping feature, you can assign the rights to administer CA NSM securable objects in a granular fashion. Because CA asset types identify specific parts of CA NSM, you can secure those parts by defining an access permission using CAISSF Scoping. Some examples of permissions using a scoping rule are as follows:

• User can administer user profiles for this node, but not for that node.
• User can use DEFINE, but not ALTER.
• User can modify other parameters in a user profile, but not the password (see Examples).

Scoping rules can be written only for CA asset types (those having the prefix CA‑), but not for user‑defined asset types.

Scoping can narrow an access permission to a keyword object, a data object, or a command object. Each of these has a specific CA asset type and an associated Security Management option (which must be set before scoping can be applied).