Specific Control Options › ADMINBY—Record Administration Information

ADMINBY—Record Administration Information

Valid on z/OS and z/VM.

Use the ADMINBY control option to record information in ACID security records to indicate the:

• Administrative ACID who performed the change
• Date, time, and system SMFID where the change was performed

ADMINBY data is stored when:

• An ACID is created
• A FACILITY is added
• Resources are permitted

When ADMINBY is turned on:

• 20 additional bytes are required to store ADMINBY information for the acid being permitted in the owning acid of the resource
• Additional I/O might be required to record the administration time‑stamp
• The LIST command will look for ADMINBY information, but will only print this output if it is present in the security record

When ADMINBY is turned off:

• CA Top Secret will not list administrative date‑time stamps, even if they were previously generated when ADMINBY was set.
• Administration date‑time stamps are not recorded for any ACID administration.

When a security file is shared between systems, one system with ADMINBY turned on and the other system with ADMINBY turned off, administrative date/time stamps are only recorded on systems where ADMINBY is on.

Administrative date/time stamps are listed when they have been recorded, and on systems where ADMINBY is set.

All entry methods are accepted.

On a z/VM system, this control option has the following format:

ADMINBY(YES|OFF)

ADMINBY(YES)

Administrative date‑time stamp to show when and by whom an ACID has been created or altered is written.

ADMINBY(OFF)

(Default) The recording and listing of administrative date‑time stamps is suppressed.

On a z/OS system, this control option has the following format:

ADMINBY|NOADMBY

ADMINBY

Administrative date‑time stamp to show when and by whom an ACID has been created or altered is written.

NOADMBY(OFF)

(Default) The recording and listing of administrative date‑time stamps is suppress.