External Security Considerations › How Security Options Interact › Limit Update Authority to Specific Parameters

Limit Update Authority to Specific Parameters

You want the user OPSUSR to read and update all CA OPS/MVS parameters except when it involves changing the STATEMAN parameter to a new value. This setting limits the access authority of the user.

Follow these steps:

1. Turn on external security.

   EXTSECURITY=ON
   

2. Grant user OPSUSR UPDATE access to the external security resource OP$MVS.OPSPARM.
3. Use the following security rule to prevent any user from setting the STATEMAN parameter to a new value:

   )SEC OPSPARM
   )PROC
   IF SEC.AUPAPANA = 'STATEMAN' THEN
     RETURN REJECT
   ELSE
     RETURN NOACTION
   

   The external security check permits all other OPSPARM calls.