Using CA IDMS Internal Security › CA IDMS Resources › Global Resources

Global Resources

What is a Global Resource?

A global resource is an entity which is shared by all CA IDMS processing in the security domain.

The following table shows the global resource types and the corresponding resource type keywords used in the SRTT and security information databases:

User Catalog

The definition of a global resource is stored in the user catalog. The user catalog is an area (SYSUSER.DDLSEC) that is shared for retrieval by all CA IDMS processing in the security domain.

Users

The user resource type represents the end users, programmers, and administrators who will be accessing systems and databases in the CA IDMS security domain. Users are identified by a user ID that must be unique across the domain.

You maintain the definitions of users in CA IDMS with the CREATE/ALTER/DROP USER statements.

Groups

The group resource type represents a collection of users. The following are some important concepts related to groups:

• All users in a group implicitly hold all privileges granted to the group.
• You can assign a user to any number of groups.
• Every user belongs to the group PUBLIC.
• A group cannot be assigned to another group.

You maintain groups with the CREATE/ALTER/DROP GROUP statements.

User Profiles

A user profile is a set of attributes that apply to a given user for both online and batch execution in any system in the domain. You create a user profile with the CREATE USER PROFILE statement.

An attribute specifies an environmental default for a user session. An attribute is expressed as a keyword and an associated value for the keyword. For example, SCHEMA=MISTEST is an attribute, of which the keyword is SCHEMA.

Even though the user profile is defined in the CA IDMS user catalog, it is possible for user profile attributes to be invoked whether signon is secured internally or externally.

Note: For more information about user profiles, see Securing User Profiles.

System Profiles

You can also create a system profile to associate with one or more users in granting signon privilege to a given system. The attributes in a system profile apply to a user session on a specified system. If both a user profile and a system profile are found when the user signs on, the attributes in the two profiles are merged into a user session profile. System profile attributes take precedence over user profile attributes for those attributes defined with an OVERRIDE parameter equal to YES.

Note: For more information about creating system profiles, see the CA IDMS System Tasks and Operator Commands Guide.