Keywords › SCOPE Keyword—Allow Authority

SCOPE Keyword—Allow Authority

Valid on z/OS, z/VSE, and z/VM.

Use the SCOPE keyword for the MSCA to allow authority for:

TSS ADMIN(lsca) SCOPE({lsca1}[,{lsca2},...]) {zone1} {zone2}

TSS DEADMIN(dca1|vca1|zca1|lsca1) SCOPE(profile1)

Note: The MSCA is the only one able to grant an administrative acid scope over a profile not in their normal scope.

This keyword has the following format:

TSS ADMIN(lsca) SCOPE(lsca1|zone1,...)

TSS ADMIN(admin) SCOPE(profile)      

This keyword can be used with the commands ADMIN and DEADMIN.

Only the MSCA can assign:

• An LSCA's SCOPE. This allows the LSCA to administer all of the ACIDs in their scope within the bounds of their administrative authority.
• An administrative ACID scope over a profile. This allows the administrative ACID to ADD or REMOVE the specified PROFILE to ACIDs It does not allow the administrative ACID to manipulate objects inside the profile. The administrative acid cannot ADD or REMOVE keywords from the PROFILE the administrative acid cannot PERMIT or REVOKE resources from the PROFILE.

Note: Administration of profiles may not be given to ACIDs of type USER or LSCA.

Examples: SCOPE keyword

This example gives LSCA01 administrative authority over LSCA02 and ZONE1:

TSS ADMIN(LSCA01) SCOPE(LSCA02,ZONE1)

To remove an ACID or ACIDs from the LSCA's scope, use the DEADMIN command function and specify each ACID being removed.

This example removes all lower level administrative authorities from LSCA01:

TSS DEADMIN(LSCA01) SCOPE(LSCA02,ZONE1)

This example gives an administrator an administrative ACID scope over a profile not normally within the ACID's scope of authority. In this example, DCA2 administers DEPT2, and PROF1 resides in DEPT1.

This example gives DCA2 administrative authority over PROF1:

TSS ADMIN(DCA2) SCOPE(PROF1)

This example grants DCA1 scope over a profile PROFILE1:

TSS ADMIN(dca1) SCOPE(profile1)

This example allows DCA1 to add and remove the profile from acids in their scope:

TSS ADD(user1) PROFILE(profile1)