Configuring CA VM:Secure for SFS › Granting and Revoking Access to Files Spaces › Preparing to Use GRANT AUTHORITY and REVOKE AUTHORITY Commands

Preparing to Use GRANT AUTHORITY and REVOKE AUTHORITY Commands

• Give the CA VM:Secure service virtual machine SFS administrator authority on an ADMIN record in the DMSPARMS configuration file of every file pool for which GRANT AUTHORITY and REVOKE AUTHORITY commands will be issued.
• Give GRANT AUTHORITY and REVOKE AUTHORITY authorization to the users who will be issuing the commands.

  Note: For information about granting authorizations to the GRANT AUTHORITY and REVOKE AUTHORITY commands, see the chapter Authorizations.

• Enable the CA VM:Secure Servant Facility.
• CA VM:Secure uses a servant to issue the GRANT AUTHORITY and REVOKE AUTHORITY commands. Additionally, CA VM:Secure dynamically gives to (and revokes from) the servant the required SFS administrator authorization.
• If required, verify CA VM:Secure has access to the DMSJNE file.

  DMSJNE is an optional customer–written routine that resolves user IDs on other systems to a local user ID when a nickname is specified on a command. If your site uses the DMSJNE routine, CA VM:Secure must have access to it because CA VM:Secure calls DMSJNE to help resolve nicknames and user IDs on other systems.

  Note: For additional information about DMSJNE and nickname resolution, see the appropriate IBM SFS and CRR Planning and Administration documentation.