Controlling Access Using SAF › Overview of SAF

Overview of SAF

You can use your external security in lieu of the internal security to provide access to commands, subcommands, job names, and resources.

SAF calls made for various CA SYSVIEW entities determine whether to permit access.

Review the following external security guidelines:

• CA SYSVIEW always checks the internal security first unless 'Bypass internal security call' is set to YES in the External Security Section of the User Group.
• If the internal security fails the access, external security cannot override the failed access by permitting access to the resource.
• Grant external security full control using one of the following settings:
  • Set all internal security rules to allow access to all commands, job names, and resource.
  • Set the ‘Bypass internal security call’ to YES.
• If SAF is unavailable, access is granted to only users in the ADMIN group while your external security is not active.
• The following special characters are translated to a dash (‘-‘) in the Entity Name that is used for the SAF call:

  !`~#%¬&*()_+=¦\{}¢|<>:;"'?/,

Note: For more information, see the online Help topic Implementing External Security from the TOPICS command.