Previous Topic: Node ProtectionNext Topic: Specific Device Output Restrictions

Protecting Resources › Operator Commands Restriction

Operator Commands Restriction

Designated users can access the indicated operator commands in an unlimited or a restricted manner.

To restrict the use of operator commands

  1. Establish ownership. For example: 
    TSS ADDTO(DEPT01) OPERCMDS(JES.CANCEL)
  2. Authorize access to the operator command. For example: 
    TSS PERMIT(USER01) OPERCMDS(JES.CANCEL)

Example: restrict operator commands

This example issues D A, L from the console:

TSS PERMIT(USER01) OPERCMDS(MVS.DISPLAY.ACTIVE)

Operator Command Masking

Masking can be used to group operator commands whose names share similar characteristics. These shared patterns can then be used as the operands of the OPERCMDS parameter in TSS entries.

A masked operator command is treated by CA Top Secret like a generic prefix. Any operator command that begins with a mask is considered a match by the security validation algorithm, and the associated access authorizations are honored.

Operator Command Access Levels

The access levels that can be specified for operator commands are: