Defining Security Protection Profiles in CA Top Secret › Utility Protection Profiles for CA Top Secret › PERMIT Command for Utility Protection Profiles in CA Top Secret

PERMIT Command for Utility Protection Profiles in CA Top Secret

Use the CA Top Secret PERMIT command to define to CA Top Secret the utilities that a specific user is permitted to run.

This command has the following format:

TSS PERMIT(acidname)   CA@BES(BESn.UTILITY.utility_name) ACCESS(READ)

TSS

Indicates a CA Top Secret command.

PERMIT

Specifies the PERMIT command.

acidname

Specifies the accessor ID

CA@BES

Specifies the general resource class for CA Tape Encryption. This is always CA@BES.

UTILITY

Specifies that this statement defines permissions for the specified utility on the specified BES subsystem.

n

Indicates the BES task number. If you specify BES with no subsystem identifier, the profile applies to all BES subsystems.

utility_name

Indicates one of the eligible CA Tape Encryption utilities. Options for this parameter are as follows:

TBESHOW

Specifies the BES database listing utility.

TBEKMUTL

Specifies the BES key maintenance utility.

ACCESS

Specifies the permission access granted. For granting access to run utilities, the minimum value that you need to specify is READ. It allows the specified user to execute the utility.

Example: Permit a specific user to access a specific utility on a specific BES subsystem

This example permits the user SYSTEMS to run the TBESHOW utility on BES1.

TSS PERMIT(SYSTEMS)   CA@BES(BES1.UTILITY.TBESHOW) ACCESS(READ)