Previous Topic: Authorizing Resource AccessNext Topic: Denying Resource Access with ACTION(DENY)


Allowing Resource Access with ACTION(ADMIN)

Under normal circumstances, CA Top Secret allows an administrator to PERMIT and REVOKE only those resources which fall under his scope. When specifying ACTION(ADMIN), the administrator gives authority to another administrator requesting the ability to PERMIT and REVOKE resources outside of his scope. For example, the following allows DCA05 to permit or revoke access to this resource to other users although the resource itself is not owned within his scope.

TSS PER(DCA05) VMMD(MAINT.019) ACTION(ADMIN)