Previous Topic: AuthorityNext Topic: Resource Protection


Facilities

A facility is a way of grouping options associated with a particular service to which users sign on. To sign on to a service, a user must have access to the facility. Only the MSCA can access any facility by default. Everyone else must be authorized to access one or more facilities.

CA Top Secret comes with facilities already defined in the Facilities Matrix Table. CA Top Secret provides security for many facilities, including the following facilities:

More information:

Protecting Facilities

Facility Access Authorization

To assign authority to access a particular facility, use the FACILITY keyword with the CREATE or ADD command function.

The algorithm determining FACILITY access searches for a rule allowing access in the sequence:

If a FACILITY rule is found that denies access, CA Top Secret continues searching subsequent rules. If no later rule allows access, a FACILITY authorization failure occurs. This action is true regardless of the reason for the failure (for example, TOD, SYSID, or CALENDAR).

For information on the facilities specified with the FACILITY parameter, see the Control Options Guide. For a list of facilities that you can use for your site, check your Facility Matrix Table.

Examples: authorize access

This example authorizes USER01 to access the TSO facility:

TSS ADDTO(USER01) FACILITY(TSO)

This example gives USER01 access to all facilities:

TSS ADDTO(USER01) FACILITY(ALL)