Configuration File Reference › GRANT Record › Definitions

Definitions

authority

Specifies the authorization to use an entire command, a command and some of its parameters, or a list of commands; authority can be any of the authorizations in the following tables:

• Any command or utility authorization, User Selection Menu (USE command) authorization, or Manager Selection Menu (MANAGE command) authorization from the Authorizations to Use CA VM:Secure Commands and Utilities table in the Administration Guide.
• Any predefined variable list from the Predefined Variable Lists table in the Administration Guide.
• Any command processing authorization from the Authorizations for Command Processing table in the Administration Guide.
• Any lists you create using LIST records.
• For more information about how to use lists, see User ID Lists and Authority Lists in the chapter "Authorizations" in the Administration Guide. For more information about the LIST record, see LIST Record.

  You can also use an authorization with a trailing asterisk (for example, MAN*) to indicate all authorizations that begin with the specified characters. Such authorizations will be flagged by the configuration file editor as unrecognized, but they are still functional.

OVER

Limits the scope of the authority; you can use the word OVER, to make it clear that the authority is valid only for user ID(s) that follow the word OVER.

target users

Specifies the user ID or a list of user IDs, over which the authority is granted to the users.

users

Specifies a list of user IDs, separated by blanks that receive these authorizations. A trailing asterisk (for example, M*) indicates that all user IDs beginning with the specified characters are authorized.

(CA VM:Secure only) Users can also be a list of security groups, separated by blanks, that receives these authorizations. A trailing asterisk on a security group name indicates that all members of those groups that begin with the specified characters are authorized.

GROUP

(CA VM:Secure only) Specifies that each user is a security group. The record then applies to all user IDs belonging to the named security groups.