Previous Topic: Securing Definitions In The System DictionaryNext Topic: Securing Systems


Securing DCADMIN

About the DCADMIN Privilege

A holder of DCADMIN privilege can perform system administration functions. The DCADMIN user holds definition and access privileges on /DC system resources. CREATE, ALTER, DROP, and DISPLAY privileges on a system allow the user to maintain the system configuration using CA IDMS system generation.

The holder of DCADMIN privilege can grant all system privileges to one or more users.

Until you secure the DCADMIN resource, any user can administer security on system resources.

How to Secure DCADMIN

To secure DCADMIN internally, include an entry in the SRTT:

#SECRTT    TYPE=ENTRY,                                        X
      RESTYPE=DCA,                                            X
      SECBY=INTERNAL

To secure DCADMIN externally, include an entry in the SRTT:

#SECRTT    TYPE=ENTRY,                                        X
      RESTYPE=DCA,                                            X
      SECBY=EXTERNAL,                                         X
      Additional parameters required

Note: For more information, see #SECRTT.

How to Grant the DCADMIN Privilege

You can grant DCADMIN privilege to one or more users with a GRANT DCADMIN statement. To issue this statement, you must hold either SYSADMIN privilege or DCADMIN privilege.

Note: For more information, see GRANT Administration Privilege in the chapter Syntax for Securing System Resources.