Keywords › STCACT Keyword—Operator Accountability

STCACT Keyword—Operator Accountability

Valid on z/OS.

Use the STCACT keyword with the STC special record to invoke operator accountability. When a START command is entered from the console, requests the ACID and password. This suppresses starting the task unless a valid ACID and password have been supplied. Operator accountability generates an audit event.

If the ACID or password is invalid the started task fails. An ACID with password NOPW cannot be used for started task operator accountability.

This keyword has the following format:

TSS ADDTO(STC) PROCNAME(stcname|DEFAULT)
               ACID(acid|action)
               [STCACT]

stcname

The STC procedure name.

Range: 1 to 8 characters

DEFAULT

Provides undefined started tasks with a default ACID or default action. A started task is undefined if the procname in the operator console START command does not match any of the STC PROCNAME procedures or prefixes on file.

acid

Pre-existing ACID that CA Top Secret assigns the started task with designated PROCNAME. If the ACID is defined with a significant password (other than NOPW), the system console prompts for the PASSWORD associated with "acid." If the ACID is deleted, if the stcname procedure is started and assigned to this now invalid ACID. An error is issued by the delete but the command is allowed to continue.

Range: 1 to 8 characters

action

If no ACID was created for the STC, choose one of the following actions:

• BYPASS—Security checking for the stcname is bypassed. This is not recommended for complex tasks like CICS, where BYPASS security can cause security failure and unpredictable outcomes during initialization and transaction execution.
• FAIL—The stcname initiation fails.
• PROMPT—The console operator is prompted for an ACID and password assigned for this instance of the started task of this stcname.

This keyword is used with:

• The commands ADDTO and REMOVE
• The STC ACID only
• MISC9(STC) authority

Examples: STCACT keyword

This example indicates that the use of the disk copy STC is audited:

TSS ADDTO(STC) PROCNAME(DISKCOPY)
               ACID(OPS99)
               STCACT

This example removes the STCACT attribute by the entire STC definition, and then defines the STC without the attribute:

TSS REMOVE(STC) PROCNAME(DISKCOPY)

TSS ADDTO(STC) PROCNAME(DISKCOPY)
               ACID(OPS99)