Administration Guide › Authorizations › User ID Lists and Authority Lists › Predefined Variable Lists (CA VM:Director)

Predefined Variable Lists (CA VM:Director)

CA VM:Director provides lists that represent dynamic groups of user IDs. The user IDs in these lists vary, depending on your configuration. For example, *DIRMGRS represents all of your site’s directory managers. If only CARLAT is a directory manager, that is the only user ID represented by *DIRMGRS. If you later add WOODYB as a directory manager, the variable list *DIRMGRS now represents CARLAT and WOODYB.

You can use these predefined variable lists, shown in the table that follows, in part of a GRANT or a WITHHOLD record and as part of the authorization or as part of the object of the authorization. When they appear in part of the authorization, they narrow the scope of the authorization.

You can use a predefined variable list in any authorization that requires a user ID. Uses are explained in the next section.

The variable lists that specify a variable group of user IDs that belong to a named user ID or group have alternate forms.

These alternate forms, as shown in the Predefined Variable Lists table, are different only to help show the ownership of the variable group to anyone who reads the GRANT record.

Example:1

The following user ID phrases are identical. They all mean "all user IDs that directory manager CARLAT manages:"

*DIRUSRS CARLAT
*DIRUSRS OF CARLAT
CARLAT’S *DIRUSRS

Example:2

You can include these user ID phrases on GRANT records to authorize all user IDs that directory manager CARLAT manages to use a command or a list of commands.

GRANT EDIT TO *DIRUSRS CARLAT
GRANT EDIT TO *DIRUSRS OF CARLAT
GRANT EDIT TO CARLAT’S *DIRUSRS