ESM Support (CA VM:Director only)

This chapter describes how to enable access control and auditing for CA VM:Director commands using a VM external security manager (ESM) product as an alternative to the GRANT/WITHHOLD command authorization support.

Any ESM that supports a RACROUTE macro interface can be used. This includes products like RACF from IBM or CA Top Secret for z/VM from CA.

This section contains the following topics:

ESM Command Authorization

Setting Up User Exits for Co-Existence of CA VM:Director with an ESM

Enabling CA VM:Director Access to ESM-Controlled Resources

Enabling End-User Access to ESM-Controlled CA VM:Director Commands