Keywords › FACILITY Keyword—Specify Facilities

FACILITY Keyword—Specify Facilities

Valid on z/OS, z/VM, and z/VSE.

Use the FACILITY keyword to:

• Specify which facility or facilities an ACID may or may not access
• Give or remove administrators authority to administer the use of a facility (z/VM and z/VSE) or facilities (in z/OS) within their scope
• Permit an ACID to have access to a resource through the specified facility

When used with ADMIN, this keyword has the following format:

TSS ADMIN(acid) FACILITY(facility name(s))

When used with ADDTO, this keyword has the following format:

TSS ADDTO(ACID|ALL) FACILITY(fac,fac,.... | ALL)

When used with PERMIT, this keyword has the following format:

TSS PERMIT(acid) resource(prefix(es))
                 FACILITY(facility name)

If the FACILITY keyword is not specified in a PERMIT function, CA Top Secret allows the user to access the resource from any facility authorized for that user.

Use the of the PERMIT function does NOT require that the administrator have authority to grant an ACID signon ability to the facility. Therefore, an administrator may enter this command even though the administrator does not have authority for TSO. However, in this case, the administrator must have DSNAME(XAUTH) authority.

Facilities listed as operands must reside in the site's Facilities Matrix Table. This is done by specifying the ACTIVE sub-option of the FACILITY control option for that facility.

The control options that can be used with FACILITY are:

Expiration

FOR or UNTIL

Time/Day

TIME and/or DAY; TIMEREC and/or CALENDAR

Actions

FAIL, NOTIFY, AUDIT, DENY

System access

SYSID

Note: You can also control mode by facility for an individual user by using the FACILITY keyword on a TSS PERMIT command. For example:

TSS PERMIT(USER01) MODE(WARN)
                   FACILITY(BATCH,TSO)

This keyword is used with:

• The commands CREATE, PERMIT, ADMIN, DEADMIN, ADDTO, REMOVE, and WHOHAS
• The ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, MSCA, and ALL Record
• Authorization to administer a specific facility or facilities to authorize access to ACIDs