Previous Topic: INCLUDE/EXCLUDE ProcessingNext Topic: INCLUDE/EXCLUDE Control Statements—Filter Resources

Unloading the Security Information › Run the Unload Utility › Control Statements › INCLUDE/EXCLUDE Control Statements—Filter ACIDs

INCLUDE/EXCLUDE Control Statements—Filter ACIDs

ACIDs of type USER, VCA, DCA, and ZCA can be excluded from the repository by using the INCLUDE and EXCLUDE statements. ACIDs of type PROFILE, GROUP, SCA, LSCA, and MSCA are included in the repository even if a matching exclude statement is specified. In addition, all resource ownership and administrative authority information are always included in the repository. ACIDs of type USER, VCA, DCA, ZCA, DEPARTMENT, DIVISION, and ZONE can be specified on an INCLUDE or EXCLUDE statement. If an ACID of another type is specified, the statement is accepted but will not affect processing.

If an organizational acid such as a department, division, or zone is specified, the INCLUDE or EXCLUDE applies to all USER, VCA, DCA, and ZCA acids belonging to that organization. Resource ownerships and PROFILE and GROUP type acids that belong are included in the repository even if the organizational acid is excluded.

If an ACID is excluded from the repository, no user information is loaded. No records are generated for the excluded ACID except for resource ownership and administrative authority information. This information is needed to correctly report on administrative scope and permissions to the owned resource for other acids.

If multiple INCLUDE and EXCLUDE statements match an ACID, the most specific statement is used. The following list is the order of most specific to least specific:

Note: useracid and useracidprefix can be type USER, DCA, VCA, or ZCA.

If multiple INCLUDE/EXCLUDE ACIDPRFX(acidprefix) statements are specified for the same acid type, the longest acidprefix is considered more specific. If the same acid or acid prefix is specified on both an INCLUDE and an EXCLUDE statement, the INCLUDE statement is used.

INCLUDE ALLACIDS

ALL USER, DCA, VCA, and ZCA acids are loaded into the CIA repository unless a more specific EXCLUDE statement applies. INCLUDE ALLACIDS is the default and is in effect unless EXCLUDE ALLACIDS is specified.

EXCLUDE ALLACIDS

If specified, no USER, DCA, VCA, or ZCA acids will be loaded into the CIA repository except for acids and organizations specified on an INCLUDE statement.

INCLUDE ACID(acidname)

The specified ACID is included in the repository. If acidname is an organizational acid, all acids in that organization are also included unless a more specific EXCLUDE statement applies.

Limits: 1 to 8 characters. Only one acid name may be specified for each INCLUDE statement.

EXCLUDE ACID(acidname)

The specified ACID is excluded from the repository. If acidname is an organizational acid, all acids in that organization are also excluded unless a more specific INCLUDE statement applies.

Limits: 1 to 8 characters. Only one acid name can be specified for each EXCLUDE statement.

INCLUDE ACIDPRFX(acidprefix)

Any ACID that matches the specified prefix is included in the repository. If the matching ACID is an organizational acid, all acids in that organization are also included unless a more specific EXCLUDE statement applies.

Limits: 1 to 7 characters. Only one prefix may be specified for each INCLUDE statement.

EXCLUDE ACIDPRFX(acidprefix)

Any ACID that matches the specified prefix is excluded from the repository. If the matching ACID is an organizational acid, all acids in that organization are also excluded unless a more specific INCLUDE statement applies.

Limits: 1 to 7 characters. Only one prefix may be specified for each EXCLUDE statement.