Rules Facility Guide › Security with the Rules Facility › Controlling CA VM:Schedule Commands › VMSCHED SCHEDULE Rule

VMSCHED SCHEDULE Rule

Suppose there is only one group of people at your site (security group SALES) that is allowed to schedule jobs to initiate on user ID NORMP. To specify that only user IDs in the security group SALES are allowed to schedule jobs to run on the user ID NORMP, add the following rules to NORMP’s user rules file:

ACCEPT SALES VMSCHED SCHEDULE * (GROUP
REJECT * VMSCHED SCHEDULE *

These rules prohibit anyone except user ID NORMP and members of the security group SALES from scheduling jobs to run on user ID NORMP.

An authorized system administrator can add rules at the system level to allow only members of the security group SALES to schedule jobs on the CA VM:Schedule virtual machine with the USER option of the CA VM:Schedule SCHEDULE command:

ACCEPT SALES VMSCHED SCHEDULE * (GROUP
REJECT * VMSCHED SCHEDULE *

These rules do not control jobs scheduled with the CA VM:Schedule EXEC command, which initiate on the CA VM:Schedule service virtual machine. Use the AUTHORIZ record in the VMSCHED CONFIG file to control who can schedule EXECs residing on the CA VM:Schedule service virtual machine.