Previous Topic: CHKCERT Function—Check CertificatesNext Topic: DEADMIN Function—Remove Administrative Authority


CREATE Function—Define a New ACID

Valid on z/OS, v/VSE, and z/VM.

Use the CREATE command function to define new ACIDs to CA Top Secret. The CA Top Secret administrator can also assign resource ownership and/or security attributes while creating the ACID.

The administrator must have:

This command function has the following format:

TSS CREATE(acid)
acid

The ACID being created. The only characters used for an ACID are:

Other characters may cause unpredictable results and are not supported.

Use of DEPARTMENT, DIVISION, and ZONE

The following describes how SCAs, LSCAs, ZCAs, VCAs, and DCAs enter the DEPARTMENT, DIVISION, and ZONE keywords:

SCA

SCAs must enter the ZONE, DIVISION or DEPARTMENT keyword with all TSS CREATE entries which require these keywords.

LSCA

LSCAs must enter the ZONE or DIVISION keyword with all TSS CREATE entries which require these keywords.

ZCA

ZCAs cannot enter the ZONE keyword in their CREATE entries. CA Top Secret automatically assigns the ACID to the ZCA's zone. The ZONE keyword is required if the person entering the command function is an SCA.

VCA

VCAs cannot enter the DIVISION keyword in their CREATE entries. CA Top Secret automatically assigns the ACID to the VCA's division. The DIVISION keyword is required if the person entering the command function is an SCA.

DCA

DCAs cannot enter the DEPARTMENT keyword in their CREATE entries. CA Top Secret automatically assigns the ACID to their department. The DEPARTMENT keyword is required if the person entering the command function is not a DCA.

CREATE Applicable Keywords

The NAME must be entered as part of all CREATE functions.

Depending on the type of ACID being created, the TYPE keyword as well as the DEPARTMENT and/or DIVISION keywords are also specified.

The command function uses the keywords:

ABSTRACT
APPLICATION
AREA
ASUSPEND
AUDIT
COMMAND
CONSOLE
CPCMD
CACMD
CPU
DATABASE
DBD
DB2
DB2BUFFP
DB2COL
DB2DBASE
DB2PKG
DB2PLAN
DB2STOGP
DB2SYS
DB2TABLE
DB2TABSP
DCSS
DCT
DEPARTMENT
DEVICES
DIAGNOSE
DIVISION
DSNAME
DUFUPD
DUFXTR
FACILITY
FCT
FIELD
FOR
GAP
GROUP
IBMFAC
IBMGROUP
INSTDATA
IUCV

JCT
JESJOBS
JESPOOL
KERBVIO
LANGUAGE
LTIME
MASTFAC
MGMTCLAS
MODE
MRO
MULTIPW
NAME
NOADSP
NODES
NODSNCHK
NOATS
NOLCFCHK
NOPERMIT
NOPWCHG
NORESCHK
NOSUBCHK
NOSUSPEND
NOVMDCHK
NOVOLCHK
OIDCARD
OPCLASS
OPCMD
OPERCMDS
OPIDENT
OPPRTY
OTRAN
PANEL
PASSWORD
PHYSKEY
PPT
PROCNAME
PROFILE
PROGRAM
PROPCNTL
PSB

PSFMPL
RSTDACC
SCTYKEY
SDSF
SITRAN
SMESSAGE
SMSAPPL
SMSDATA
SMSMGMT
SMSSTOR
SOURCE
SPI
STCACT
STORCLAS
SUBSCHEM
SUSPEND
TARGET
TERMINAL
TRACE
TRANSACTIONS
TSOACCT
TSOAUTH
TSOCOMMANDS
TSODEFPRFG
TSODEST
TSOHCLASS
TSOJCLASS
TSOLACCT
TSOLPROC
TSOLSIZE
TSOMCLASS
TSOMPW
TSOMSIZE
TSOOPT
TSOPRFG
TSOPROC
TSOCLASS
TSOUDATA
TSOUNIT
TSTTYPE

TZONE
UNDERCUT
UNTIL
UR1/UR2
USER
USRCLASS
USING
VMCF
VMDIAL
VMMACH
VMMDISK
VMNODE
VMRDR
VOLUME
VTAMAPPL
VXDEVICE
VXFILE
WAACCNT
WAADDR1
WAADDR2
WAADDR3
WAADDR4
WABLDG
WADEPT
WAIT
WANAME
WAROOM

DUFXTR OPPRTY TSOLSIZE WRITER
FACILITY OTRAN TSOMCLASS XCOMMAND
ZONE

Example: CREATE function

This example creates the definition for ACID CLRK99:

TSS CREATE(CLRK99) TYPE(USER)
                   NAME('Bill Smith')
                   PASS(Bosco)
                   DEPT(LEVEL01)