Is the Master Acid required for TPAM? Or is there an alternative

Document ID : KB000015378
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

Can you use another acid aside from the MSCA with the started task acid for TPAM?

Question:

Is the MSCA required for the TPAM started task so it can make password changes for user?

Answer:

The MSCA is not really required for the TPAM started task. You can use an acid with similar privileges as the MSCA.

You can create an SCA type TSS Administrator with all the bypass attributes.

You can use the MSCA if you want, but generally speaking the MSCA should be used sparingly. That is why most sites create a SCA type acid with similar admin privileges as the MSCA and us it, instead of the MSCA.

Some site put the MSCA and password in an envelop and keep it in a safe, only to be used in an emergency.