Previous Topic: Securing DCADMINNext Topic: Securing Signon


Securing Systems

About Systems

The system resource represents DC systems in the domain.

Until you secure systems, any user can create and maintain a system using CA IDMS system generation.

How to Secure Systems

To secure systems internally, include an entry in the SRTT:

#SECRTT    TYPE=ENTRY,                                        X
      RESTYPE=SYST,                                           X
      SECBY=INTERNAL

To secure systems externally, include an entry in the SRTT:

#SECRTT    TYPE=ENTRY,                                        X
      RESTYPE=SYST,                                           X
      SECBY=EXTERNAL,                                         X
      Additional parameters required

Note: For more information, see #SECRTT.

How to Define a System

You define a system as a secured resource with a CREATE RESOURCE SYSTEM statement, specifying the identifier of the system to match the ID parameter of the SYSTEM statement in system generation.

Note: For more information about defining and maintaining system resources, see the following sections in the chapter Syntax for Securing System Resources:

How to Grant Definition Privileges on Systems

You can delegate the authority to define and maintain systems by granting definition privileges on systems. You can specify any combination of CREATE, ALTER, DROP, and DISPLAY privileges, or you can specify all definition privileges (DEFINE). As a holder of DCADMIN privilege, you can specify WITH GRANT OPTION when you grant definition privileges to allow the recipient to grant the same privileges to another user.

Note: For more information about administering privileges on systems, see the following sections in the chapter Syntax for Securing System Resources: