Endpoint Administration Guide for UNIX › Managing Users and Groups › Guidelines for Managing Accessors in Enterprise Stores › Restrictions on the Use of Enterprise Users

Restrictions on the Use of Enterprise Users

CA Access Control imposes the following restrictions on the use of enterprise users:

• You cannot create, or refer to, an enterprise user in CA Access Control if it has the same name as a user defined in the database.
• You cannot create, delete or modify an enterprise user using the selang AC environment.
• You cannot use an enterprise user as a logical user A logical user is a user with the LOGICAL attribute applied to their record, or a surrogate who runs a trusted program (SPECIALPGM resource). A logical user cannot log in and is used for internal CA Access Control purposes only..
• By default, you cannot create an enterprise user in CA Access Control unless the user is already defined in the enterprise user store. However, you can enable or disable this behavior on UNIX systems.

More information:

Enable or Disable Checking Enterprise Store before Creating XUSER Records on UNIX