Previous Topic: IBM DCE, SystemView, Netview, and OPTIME ProtectionNext Topic: SMS Data Fields


Delegated Resources

The DELEGATE record defines one or more resources as delegated. Any resource class available for SAF FASTAUTH processing can have resources designated as delegated.

Only create delegated resources if an application explicitly requires it. CA Top Secret resource validation is affected by the resources you define in this record.

Important! Improper creation of delegated resources can adversely affect some applications.

This command has the following format:

TSS ADD (DELEGATE) 
        RTYPE(resource-type) 
        RNAME(resource-name | resource-mask)
RTYPE(resource-type)

Specifies the three-character type code of the resource. This field is required and cannot be masked. The three-character resource type is used to uppercase the resource name at ADD/REPLACE time when its associated eight character resource class in the RDT is not mixed-case.

RNAME(resource-name | resource-mask)

Specifies the 1 to 256-byte name of the delegated generalized resource or the 1 to 252-byte name of the delegated DB2 resource.

Example: create a delegate record

This example inserts a delegate record designated as a resource in the FACILITY class called IRR:

TSS ADD(DELEGATE) IBMFAC(IRR.)

You must have RESOURCE(OWN) authority to execute this command.

Display Delegated Resources

The LIST DELEGATE command displays the CA Top Secret resources defined to the system in delegate records. You must have DATA(NAMES) authority to execute this command.

To display delegate records, enter the command:

TSS LIST(DELEGATE)