Creating Security Administrators › Control ACIDs

Control ACIDs

All Control ACIDs, including the MSCA, go through password checking, even in DORMANT mode.

To create a control ACID, enter the command:

TSS CREATE(acidname) TYPE(DCA|VCA|ZCA|LSCA)
                     NAME('name')
                     PASSWORD(password,nnn,EXP)
                     [ZONE|DIVISION|DEPT(name)] 

TYPE

Identifies the ACID as a DCA, VCA, ZCA, LSCA, or SCA.

NAME

The name of the control ACID. Surround with single quotes if embedded with blanks.

Range: Up to 32 characters.

Valid values: Letters, numbers, and special characters

PASSWORD

Specifies the ACIDs password.

Range: Up to 8 characters.

ZONE|DIVISION|DEPT

Specifies the range of ACIDs which a control ACID is allowed to manipulate, and the range of operations allowed to manipulate these ACIDs. SCOPE is normally defined by the hierarchy ACID to which the control ACID is defined.

Examples: adding a control ACID

In this example, the DEVVCA control ACID is associated with DIVISION(DEV). All ACIDs defined within or below DIVISION(DEV) are within the scope of this VCA. ZCA, VCA and DCA ACIDs are always associated with a hierarchy ACID.

TSS CREATE(DEVVCA) TYPE(VCA) 
                   NAME(‘DEVELOPMENT VCA’) 
                   DIVISION(DEV)
                   PASSWORD(VEFOK,7)

In this example, the MSCA creates an SCA whose password expires the first time the SCA logs on and uses the site’s default expiration interval for all subsequent passwords:

TSS CREATE(SCA1) NAME(‘Nat Abels’)
                 TYPE(SCA)
                 PASSWORD(TRUST,,EXP)

In this example a secondary SCA is given most of the authority of the MSCA. An SCA with this authority can do almost everything except define another SCA or LSCA or change the administrative authority of an existing SCA or LSCA:

TSS ADMIN(SCA1) RESOURCE(ALL)
                ACCESS(ALL)
                ACID(ALL)
                FACILITY(ALL)
                DATA(ALL,PROFILE,SESSKEY)
                MISC1(ALL)
                MISC2(ALL)
                MISC3(ALL)
                MISC4(ALL)

This example creates a ZCA whose password expires when he first logs on and prompts for a new password every 30 days:

TSS CREATE(ZCA1) NAME(‘Bob Baker’)
                 TYPE(ZCA)
                 PASSWORD(HONOR,30,EXP)
                 ZONE(ZONA)

                MISC5(ALL)
                MISC8(ALL)
                MISC9(ALL)

In this example, the MSCA creates an LSCA whose password expires in seven days.

TSS CREATE(LSCA1) NAME(‘Bill Bailey’) 
                  TYPE(LSCA) 
                  PASSWORD(HONOR,7)
TSS ADMIN(LSCA1) SCOPE(ZONE1,ZONE2,ZONE3)

This example creates a VCA whose password does not expire:

TSS CREATE(VCA1) NAME(‘Charles Clark’)
                 TYPE(VCA)
                 PASSWORD(BOLD,0)
                 DIVISION(FINDIV)

This example defines VCA DEVVCA to the development division:

TSS CREATE(DEVVCA) TYPE(VCA) 
                   NAME(‘DEVELOPMENT VCA’)
                   DIVISION(DEV)
                   PASSWORD(VEFOK,7)

This example creates a DCA whose password expires when he first logs on and prompts for a new password every fifteen days:

TSS CREATE(DCA1) NAME(‘Dave Dale’)
                 TYPE(DCA)
                 PASSWORD(BEST,15,EXP)
                 DEPARTMENT(FINDEPT)