Modifying Your Security Environment › Control Options › Restricted Control Options

Restricted Control Options

CA Top Secret restricts any control option that changes the security environment. Only control options that request status displays are not restricted.

When you specify a control option or change it at the console, the following actions occur:

• If an ACID with the CONSOLE attribute is logged on to the console, the request is executed.
• If an ACID without the CONSOLE attribute is logged on to the console, CA Top Secret prompts you for the necessary authorization. The request does not take effect unless you enter one of the following:
  • An ACID that possesses the CONSOLE attribute followed by that ACID's password in the format ACID/password.
  • The MSCA's previous password.

Whenever you change a control option, CA Top Secret automatically maintains an audit trail, including the ACID that changed the control option.

If you change a restricted control option using the TSS MODIFY command function, the administrator must possess the CONSOLE attribute.