Previous Topic: Predefined Variable Lists (CA VM:Director)Next Topic: Creating Authorizations to Use Commands on Only Some Groups of User IDs


Creating Authorizations with User ID Lists and Authority Lists

When you have created the lists you need, you can use them on GRANT and WITHHOLD records. For example, instead of creating 12 GRANT records—three command authorizations (ADMIN, EDIT, QUERY) for each of the four publications manager user IDs listed in User ID Lists—you create only one. This one record authorizes all user IDs on the *PUBS list to use all commands on the *PUBCMDS list:

GRANT *PUBCMDS TO *PUBS

You can include a user ID list on a GRANT record authorizing those user IDs to use a single command rather than an authority list. For example, you can authorize all user IDs included in the list *NONTECH (as shown in Using a List Name in Another List) to use the EDIT command:

GRANT EDIT TO *NONTECH

You can authorize a single user ID to use all the commands in an authority list. For example, you can authorize REBECCAH to use all commands in the *PUBCMDS list, even though she is not a publications manager:

GRANT *PUBCMDS TO REBECCAH