ADMINBY—Record Administration Information

Specific Control Options › ADMINBY—Record Administration Information

ADMINBY—Record Administration Information

Valid on z/OS and z/VM.

The ADMINBY control option records information in ACID security records to indicate:

Administrative ACID who performed the change.
Date, time, and system SMFID where the change was performed.

ADMINBY data is stored when:

An ACID is created.
A FACILITY is added.
Resources are permitted.

When ADMINBY is turned on:

20 extra bytes are required to store ADMINBY information for the acid being permitted in the owning acid of the resource.
Extra I/O can be required to record the administration time‑stamp.
The LIST command looks for ADMINBY information, but prints this output only if it is present in the security record.

When ADMINBY is turned off:

CA Top Secret does not list administrative date‑time stamps, even if they were previously generated when ADMINBY was set.
Administration date‑time stamps are not recorded for any ACID administration.

When a security file is shared between systems, one system with ADMINBY turned on and the other system with ADMINBY turned off. Administrative date/time stamps are only recorded on systems where ADMINBY is on.

Administrative date/time stamps are listed when they have been recorded, and on systems where ADMINBY is set.

All entry methods are accepted.

On a z/VM system, this control option has the following format:

ADMINBY(YES|OFF)

ADMINBY(YES): Administrative date‑time stamp to show when and by whom an ACID has been created or altered is written.
ADMINBY(OFF): (Default) The recording and listing of administrative date‑time stamps is suppressed.

On a z/OS system, this control option has the following format:

ADMINBY|NOADMBY

ADMINBY: Administrative date‑time stamp to show when and by whom an ACID has been created or altered is written.
NOADMBY: (Default) The recording and listing of administrative date‑time stamps is suppressed.

Note: Although it is syntactically incorrect, TSS MODIFY ADMINBY(ON) or NOADMBY(ON) set the control option on and off, respectively. An error message noting the incorrect syntax is displayed.