Enhancements to Existing Features › Product Enhancements r15 › Support for CA Top Secret r15 › Restricted Administrative Authorities

Restricted Administrative Authorities

The new CASECAUT resource class allows for additional administrative authorities.

Users with no administrative authorities now can:

• Change certain password related fields for other users within their scope if they have the proper access to TSSCMD.USER.cmd.fieldname in the CASECAUT resource class
• Issue certain digital certificate keyring and token commands for users within their scope if they have proper access to entity TSSCMD.CERTUSER.function in the CASECAUT resource class
• Use the TSSUTIL, TSTRACK, TSSAUDIT, TSSCHART, TSSCFILE, TSSXTEND, TSSSIM, and TSSFAR utilities if they have the proper authority in TSSUTILITY.utilityname in the CASECAUT resource class.

For general information, see the User Guide. For more information on the required command and keyword authorities, see the Command Functions Guide. For information on required utility authorities see the Report and Tracking, Troubleshooting, and Installation guides.