CASECAUT Stop Console Granularity?

Document ID : KB000013214
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

Is it possible to give a more specific permission than:


                TSS PER(acid) CASECAUT(TSSCMD.ADMIN.MODIFY) ACC(PRIVILEG)

So that an operator has permission to perform a temporary shutdown, without the equivalent of the entire CONSOLE option?

As an suggested permission, perhaps:


                TSS PER(acid) CASECAUT(TSSCMD.ADMIN.MODIFY.STOP) ACC(PRIVILEG)

If such a permission exists, it is not well documented. It would be extremely useful in providing operators with finely tuned permission to shutdown TSS.

Answer:

Currently that CA Top Secret functionality doesn’t exist. There is no granularity for CASECAUT in CA Top Secret Control Options modification through the TSS MODIFY command. You can only give a user access to all TSS MODIFY commands or none at all.

Recommend submitting this as an idea on Ideation so it can be considered for a future release of CA Top Secret.