Defining and Maintaining CA Ideal Users › Creating a CA Ideal User Definition

Creating a CA Ideal User Definition

To create the first version of a user definition, enter the command CREATE USER. The CREATE USER command displays a blank user definition fill-in. The User Definition Fill-in is a panel that establishes the user, assigns a user privilege, enters descriptive information about the user, and establishes the user's authorization level in each assigned system. If a user is already defined in the dictionary (for Datadictionary or CA DataQuery, for example), duplicate the user to the next version and edit the new version to define the user to CA Ideal.

A newly created user definition is assigned a version number of 1. This version of the user definition is in test status. You can edit it at any subsequent session as long as it remains in test status.

Note:

• Before a user can sign on to CA Ideal, the user definition must be marked to production status.
• When you are using an external security system to control access to CA Ideal, you must be sure that a user definition exists for the administrator before changing the SC00OPTS table to include the option SECRTY=Y. If a user definition does not exist, you cannot sign on to CA Ideal to create the remaining user definitions.

To display the User Definition Fill-in, enter the command CREATE USER or select Option 2, CREATE, from the User Maintenance Menu.

=>
=>
=>
-------------------------------------------------------------------------------
IDEAL: USER DEFINITION       USR   (001) TEST               SYS: DOC    FILL-IN

Person name    _______________  IDEAL user id ___
Description    ____________________________________
Full name      ____________________________________________________________
Password       ____________   Re-enter to confirm pswd ____________
Identification _________           Title ____________________
Org. unit      ______              Grade ______
Date created   2/17/06     Last modified ........  at ..:..
IDEAL Privileges:   Mark at least 1 with an “X” to enable IDEAL signon
 ( _ ) IDEAL Administrator - May use any IDEAL facility
 ( _ ) PRINT Administrator - Has control of Print facility
 ( _ ) DVW   Administrator - Catalogs DATAVIEW definitions
 ( _ ) IDEAL User          - May use all non-Administrator facilities

Assigned      (Indicate at least 1 assigned SYSTEM):
SYSTEM(S)   CONTROL     UPDATE    READ   UPDATE-PNL  UPDATE-RPT  RUN-PROD
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )
  ___        ( _ )      ( _ )     ( _ )    ( _ )       ( _ )      ( _ )

Note: Issue “MARK * PROD” or “MARK USER xxx VER n TO PROD” to enable signon

The fields on the User Definition Fill-in consist of:

• Person name-One- to 15-character identification of the person (user) being defined. This name must be unique at the site. CA Ideal initializes Person name to the name entered in the CREATE command, if a name was supplied there. You cannot change Person name once it is entered and accepted. If you want a new Person name, you must delete the user definition and create a new one. The Person name can be one to 15 non-blank characters and can be any combination of letters, digits, or national characters except the first character cannot be a digit.

  The Person Name does not have to be the same as the security ID or the monitor op-ID used to logon if the UIDCHK parameter of the IDOPTSCB macro is set to NO. However, unless a default user ID (DFLTUSR) is specified to determine the CA Ideal authorizations, you must still define the security ID or op-ID as an alias for the Person Name in the dictionary facility.

  If DESTINATION MAIL is used, the Person Name must be a valid CA eMail+ signon or alias.

• IDEAL User ID-One- to three-character user identification. You must enter this user ID to make the user valid for CA Ideal and it must be unique to the site. Once defined in a User Definition Fill-in, you cannot change the CA Ideal user ID. If you want a new CA Ideal user ID, delete the user definition and create a new one. The user ID can be one to three non-blank characters and can be any combination of letters, digits, or national characters. (This one- to three-character user identification becomes an alias for the PERSON in the dictionary facility.)

  Note: In CICS, the CA Ideal user ID must match the CICS op-ID unless either the UIDCHK parameter of the IDOPTSCB macro is set to NO or security is enabled (SECRTY=Y in the SC00OPTS table).

• Description-Optional description of the user being defined.
• Full name, Identification, Title, Org unit (organization unit), Grade-Descriptive information or organizational identification of the user. These areas are for documentation only and are optional.
• Password-One- to 12-character string that the user must specify on the CA Ideal signon screen. The contents of this field on the user definition panel display or are invisible, depending on the value assigned to the IDOPTSCB parameter PSWDIS=. (The user can modify this password without editing the user definition fill-in by using the ALTER SIGNON PASSWORD command described in the Command Reference Guide.)
• Re-enter to confirm pswd-A prompt and the field that only appears when the IDOPTSCB parameter PSWDIS=INVISIBLE, verifying the password field. For more information, see Customizing the CA Ideal Options Block Using IDOPTSCB, in the “Optimizing Storage Management” chapter.
• Date created-Initial date of the user definition. The system supplies this date. It is not modifiable.
• Last modified at-Date and time when this user definition was last accessed in edit mode. The system supplies the date. It is not modifiable. The system also supplies the time in the format hh:mm. It is not modifiable.
• IDEAL Privileges-Each user of CA Ideal is assigned (by marking with an x) one or more levels of privileges that govern the commands and services available to that user. You must select at least one privilege to make the user definition valid for signing on to CA Ideal. (To disable an existing CA Ideal user, erase all CA Ideal privileges and ignore the resulting error message.)
  • IDEAL Administrator-Grants the user global authorization to perform any command or service in all systems, including all services governed by all other privileges.
  • PRINT Administrator-Establishes a CA Ideal user with the authorization to control the printing facility (which includes the ability to define and delete print destinations).
  • DVW Administrator-Establishes a CA Ideal user with the authorization to catalog dataviews for CA Ideal.
  • IDEAL User-Specifies that the user is authorized to use only commands that affect the current session.

  The following table illustrates how the selection of a privilege also implies commands and services governed by other privileges.

• Assigned systems-Designates which CA Ideal systems this user is authorized to use and the authorization level the user has for each system. To assign more than the ten systems allowed on the panel, scroll forward using the PF8 key.

  A user's access to a system and to the commands that can execute in a system is controlled by the authorization specified here. The user must be assigned to at least one CA Ideal system to successfully sign on to CA Ideal.

  • CONTROL-Authorizes full control of the specified system, including the creation and deletion of programs, panels, and reports; editing the identification fill-in for programs, panels, and reports; and editing the resource fill-in of a program definition. This authorization automatically implies all other levels in the system, except running production programs (RUN-PROD) that must be selected separately.
  • UPDATE-Authorizes the user to update (edit) or read (display, print, and so on) all programs, panels, and reports in the system (except the identification fill-in and resource fill-in). This authorization automatically implies all levels in the system except control (CONTROL) and running production programs (RUN-PROD).
  • READ-Authorizes the user to read (display, print, and so on) programs, report definitions, and panel definitions in the system.
  • UPDATE-PNL (update panel)-Authorizes the user to update panel definitions in the system.
  • UPDATE-RPT (update report)-Authorizes the user to update report definitions in the system.
  • RUN-PROD (run production)-Authorizes the user to run production programs in this system.

The following table illustrates how the assignment of an authorization in a system implies commands and services governed by a lesser authorization.

Note: To enable the newly defined user to sign onto CA Ideal, issue the command MARK * PROD or MARK USER xxx VER n TO PROD after defining the user.