Using Your Security System › Utility Protection Profiles

Utility Protection Profiles

Utility protection profiles for CA Tape Encryption let you control which users can execute certain BES database (BESDB) batch job utilities. These profiles are stored in the CA@BES resource class. The following utilities are eligible to be protected by utility protection profiles:

• TBESHOW, the BES database listing utility.
• TBEKMUTL, the BES key maintenance utility.

Each of these utilities is defined by an entry in the CA@BES resource class. You can control the use of these utilities with the PROTECT and PERMIT security options at both the local and global BES level.

Access to the utility is verified against the job user ID and not the BES subsystem. Therefore, you should grant permissions to individual users that are allowed to perform the functions.