Command Functions › CREATE Function—Define a New ACID

CREATE Function—Define a New ACID

Valid on z/OS, z/VSE, and z/VM.

Use the CREATE command function to define new ACIDs to CA Top Secret. The CA Top Secret administrator can also assign resource ownership and/or security attributes while creating the ACID.

The administrator must have the following authority:

• ACID(CREATE) authority, through the TSS ADMIN function, to create ACIDs within the administrator's scope
• RESOURCE(OWN) authority, through the TSS ADMIN function, to assign resource ownership to ACIDs within the administrator's scope
• MISC1, MISC2, and MISC9 authorities, through the TSS ADMIN function, to assign security attributes

This command function has the following format:

TSS CREATE(acid)

acid

Specifies the name of the ACID that you want to create. The following characters are allowed in the ACID name:

• Alphabetical: A‑Z
• Numeric: 0‑9
• National: $ # @ % & = ?
• - + ¢ | < ! ; ¦ > : { } ¬ (allowed only for ACIDs that cannot sign on (type ZONE, DIVISION, DEPARTMENT, PROFILE, GROUP))

Example: Define an ACID

This example creates the definition for ACID CLRK99:

TSS CREATE(CLRK99) TYPE(USER)
                   NAME('Bill Smith')
                   PASS(Bosco)
                   DEPT(LEVEL01)

Use of DEPARTMENT, DIVISION, and ZONE

The following describes how SCAs, LSCAs, ZCAs, VCAs, and DCAs enter the DEPARTMENT, DIVISION, and ZONE keywords:

SCA

SCAs must enter the ZONE, DIVISION or DEPARTMENT keyword with all TSS CREATE entries which require these keywords.

LSCA

LSCAs must enter the ZONE or DIVISION keyword with all TSS CREATE entries which require these keywords.

ZCA

ZCAs cannot enter the ZONE keyword in their CREATE entries. CA Top Secret automatically assigns the ACID to the ZCA's zone. The ZONE keyword is required if the person entering the command function is an SCA.

VCA

VCAs cannot enter the DIVISION keyword in their CREATE entries. CA Top Secret automatically assigns the ACID to the VCA's division. The DIVISION keyword is required if the person entering the command function is an SCA.

DCA

DCAs cannot enter the DEPARTMENT keyword in their CREATE entries. CA Top Secret automatically assigns the ACID to their department. The DEPARTMENT keyword is required if the person entering the command function is not a DCA.

CREATE Applicable Keywords

The NAME must be entered as part of all CREATE functions.

Depending on the type of ACID being created, the TYPE keyword as well as the DEPARTMENT and/or DIVISION keywords are also specified.

The command function uses the keywords:

ABSTRACT, APPLICATION, AREA, ASUSPEND, AUDIT, COMMAND,
CONSOLE, CPCMD, CACMD, CPU, DATABASE, DBD, DB2,
DB2BUFFP, DB2COL, DB2DBASE, DB2PKG, DB2PLAN, DB2STOGP,
DB2SYS, DB2TABLE, DB2TABSP, DCSS, DCT, DEVICES,
DIAGNOSE, DIVISION, DSNAME, DUFUPD, DUFXTR, FACILITY,
FCT, FIELD, FOR, GAP, GROUP, IBMFAC, IBMGROUP,
INSTDATA, IUCV,, JCT, JESJOBS, JESPOOL, KERBVIO,
LANGUAGE, LTIME, MASTFAC, MATCHLIM, MGMTCLAS, MODE,
MRO, MULTIPW, NAME, NOADSP, NODES, NODSNCHK, NOATS,
NOLCFCHK, NOPERMIT, NOPWCHG, NORESCHK, NOSUBCHK,
NOSUSPEND, NOVMDCHK, NOVOLCHK, OIDCARD, OPCLASS,
OPCMD, OPERCMDS, OPIDENT, OPPRTY, OTRAN, PANEL,
PASSWORD, PHYSKEY, PPT, PROCNAME, PROFILE, PROGRAM,
PROPCNTL, PSB,, PSFMPL, RSTDACC, SCTYKEY, SDSF,
SITRAN, SMESSAGE, SMSAPPL, SMSDATA, SMSMGMT,
SMSSTOR, SOURCE, SPI, STCACT, STORCLAS, SUBSCHEM,
SUSPEND, TARGET, TERMINAL, TRACE, TRANSACTIONS,
TSOACCT, TSOAUTH, TSOCOMMANDS, TSODEFPRFG,
TSODEST, TSOHCLASS, TSOJCLASS, TSOLACCT, TSOLPROC,
TSOLSIZE, TSOMCLASS, TSOMPW, TSOMSIZE, TSOOPT,
TSOPRFG, TSOPROC, TSOCLASS, TSOUDATA, TSOUNIT,
TSTTYPE, TZONE, UNDERCUT, UNTIL, UR1/UR2, USER, USING,
USRCLASS, USING, VMCF, VMDIAL, VMMACH, VMMDISK,
VMNODE, VMRDR, VOLUME, VTAMAPPL, VXDEVICE, VXFILE,
WAACCNT, WAADDR1, WAADDR2, WAADDR3, WAADDR4,
WABLDG, WADEPT, WAIT, WANAME, WAROOM, DUFXTR
OPPRTY TSOLSIZE WRITER, FACILITY OTRAN
TSOMCLASS XCOMMAND, and ZONE.