CASECAUT Stop Console Granularity?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Is it possible to give a more specific permission than:

                TSS PER(acid) CASECAUT(TSSCMD.ADMIN.MODIFY) ACC(PRIVILEG)

So that an operator has permission to perform a temporary shutdown, without the equivalent of the entire CONSOLE option?

As an suggested permission, perhaps:

                TSS PER(acid) CASECAUT(TSSCMD.ADMIN.MODIFY.STOP) ACC(PRIVILEG)

If such a permission exists, it is not well documented. It would be extremely useful in providing operators with finely tuned permission to shutdown TSS.

Environment

Release:
Component: TSSMVS

Resolution

Currently that CA Top Secret functionality doesn’t exist. There is no granularity for CASECAUT in CA Top Secret Control Options modification through the TSS MODIFY command. You can only give a user access to all TSS MODIFY commands or none at all.

Recommend submitting this as an idea on Ideation so it can be considered for a future release of CA Top Secret.