Implementing External Security with CA Top Secret › Define Profiles Based on Function for Validation

Define Profiles Based on Function for Validation

Profiles in CA Top Secret are used to do the following tasks:

• Group together access requirements, which are common to more than one user. A profile can be used as a grouping mechanism to represent multiple users with identical or similar functional requirements or access authority.
• Permit the resources and accesses to a profile once, and then add the profile to the users.
• Permit access to a CA OPS/MVS resource.

We recommend that you define a department to CA Top Secret to be the owner of all CA OPS/MVS resources. That department can then become a central point of ownership and administrative responsibility for CA OPS/MVS resources. Users in any department who require access to the resources grouped into a profile can then be attached to these profiles.

You can define profiles that are based on function to use for validation processing.

Follow these steps:

1. Define your job function, or roles, using any criteria necessary. For example, create a TSS profile named OPSADMIN for the CA OPS/MVS administrators.

   Note: The REXX program DEFSAF does not define function-based groups.

2. Populate the functional profile with the resources needed for an administrator.
3. Attach this profile to users as their job roles demand.

Your functional profiles are defined.