Command Functions › DELETE Function—Delete an ACID

DELETE Function—Delete an ACID

Valid on z/OS, z/VSE, and z/VM.

Use the DELETE command function to remove an ACID definition from the security file.

You cannot delete the following ACIDs:

• An ACID to which other ACIDs connected. Division, department, and/or profile ACIDs cannot be deleted if other ACIDs are connected to them. To delete a department or division ACID, use the TSS MOVE command function to transfer all ACIDs out of the department or division being deleted. To delete a profile ACID, use the TSS REMOVE command function to remove the profile from any connected user ACIDs.
• An ACID that owns resources permitted to other ACIDs.
• Special ACIDs such as ALL, STC, AUDIT, DLF, RDT, SDT, or the MSCA's ACID.

If an ACID is deleted, CA Top Secret:

• Disconnects the deleted ACID from all profiles it is connected to
• Revokes any access permissions that the ACID was granted
• Removes any resources that the ACID owns

Issuing the DELETE command to delete a signed-on ACID automatically triggers a type 71 RACF Event Notifications (ENF) signal, which provides notification about the change to the ACID's security record. Applications that receive the signal can take action (for example, immediately remove the ACID's security record in a CICS remote region).

Administrators must have ACID(CREATE|ALL) authority, through the ADMIN function, to delete ACIDs within their scope.

This command function has the following format:

TSS DELETE(acid)

acid

Specifies the ACID being deleted.

Example: Delete an ACID

This example removes the definition for ACID CLRK99:

TSS DELETE(CLRK99)

More information:

MOVE Function—Move an ACID

REMOVE Function—Remove Resource Ownership or Resources