Security File › Defining Department, Division, and Zone ACIDs › Defining Resource Ownership

Defining Resource Ownership

After you have done your resource inventory and have established corporate responsibility for your resources, you can plan to define ownership of resources to the selected corporate entity (DEPARTMENT, DIVISION or ZONE). CA recommends that ownership be defined at this level for two reasons.

• Ownership of resources at the user equates to default access that cannot be overridden. Therefore, fine-tuning of access requirements for a specific resource cannot be done for the user that owns the resource. Ownership at the department, division or zone level does not equate to any default access for the users defined within that department, division or zone.
• If ownership is defined at the user level, ownership must be transferred to another ACID if the user terminates. This can become a maintenance problem.