Resources › CAADMIN Resource Class—Secure CAADMIN Administration

CAADMIN Resource Class—Secure CAADMIN Administration

Valid on z/OS.

Use CAADMIN to secure CAADMIN administration.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) CAADMIN(xxxxx)

Prefix length

One to eight characters

Capacity of list

One to five prefixes per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) CAADMIN(xxxxx)

Prefix length

One to forty‑four characters

Capacity of list

One to five prefixes per TSS command

CAADMIN is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
• The ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• CAADMIN (OWN) authority to ADD or REMOVE ownership of CAADMIN resources from ACIDs
• CAADMIN(XAUTH) authority to PERMIT or REVOKE access to CAADMIN resources

The administrator can use any of the following methods to control access to CAADMIN resources: Expiration, Facility, Program Pathing, Time/Day, and Actions.

Examples: CAADMIN resource class

This example protects the resource with CA Top Secret by assigning ownership to the Corporate Department(owning acid):

TSS ADDTO(CORPORAT) CAADMIN(XXXXXXXX)

The administration may now PERMIT access to users or profiles that require access.

This example removes ownership:

TSS REMOVE(CORPORAT) CAADMIN(XXXXXXXX)

This example permits users in the Technical Services Department to access CAADMIN(ABCDEFGH.XXXXXC1) on Fridays only:

TSS PERMIT(TECHPROF) CAADMIN(ABCDEFGH.XXXXXC1)
                     DAYS(FRIDAY)

This example permits users in the Technical Services Department to access to CAADMIN(ABCDEFGH.XXXXXC1):

TSS PERMIT(TECHPROF) CAADMIN(ABCDEFGH.XXXXXC1)

This example revokes access:

TSS REVOKE(TECHPROF) CAADMIN((ABCDEFGH.XXXXXC1)