Rules Reference › DIAGD4 Rule

DIAGD4 Rule

Use the DIAGD4 rule to control the ability to issue Diagnose X'D4' for defining an alternate user ID.

This rule replaces the GRANT SURROGATE authorization required for this function in previous releases. If no DIAGD4 rule is defined for a requesting user ID, then GRANT definitions will be checked to allow access. The GRANT SURROGATE authorizations will be removed in a future release of CA VM:Secure.

This is a system rule only.

{ACCEPT | REJECT} requester DIAGD4 [("Options"]

Options:

[DAY dayname[‑dayname]]
[EXPIRE mm/dd/yy [hh:mm:ss]]
[GROUP]
[HISTORY]
[TIME hhmm hhmm]

{ ACCEPT | REJECT }

Accepts or rejects the DIAGD4 request controlled by this rule

requester

Defines the set of requesting user IDs this rule is to govern. When specified without the GROUP option, requester is a user ID. Enter an asterisk (*) for requester to specify all user IDs. When specified with the GROUP option, requester is the name of a security group. Enter an * for requester to specify all user IDs in all security groups.

Note: The DAY, EXPIRE, GROUP, HISTORY, and TIME options are explained in Common Rule Options.