Need to use GRANT to authorize ENTRY command
search cancel

Need to use GRANT to authorize ENTRY command

book

Article ID: 135325

calendar_today

Updated On:

Products

VM:Secure for z/VM

Issue/Introduction

I cannot figure the syntax for GRANT and ENTRY.

I need to give a group of users the ability to change the default storage, max storage and the console statement.

ENTRY username CONSOLE .....

ENTRY username STORAGE .....

ENTRY username MAXSTORAGE ....


I tried this but got errors.

VMXLIE0268W Entry 'CONSOLE' does not exist.         
VMXLIE0393I GRANT ENTRY CONSOLE OVER *TSTIDS TO *TST

Environment

Release : 3.2

Component : CA VM:Secure for z/VM

Resolution

Use GRANT ENTRY. 


The GRANT for this is a bit odd but this is how you set it up for the ENTRY command and its subcommands: 

 

 GRANT ENTRY OVER *TSTIDS CONSOLE TO *TST 



If you want to check the authorization with MAY it would look like this:


vmsecure may yv03 entry yvo2 console

VMXLSA0264I Accepted by:


GRANT ENTRY OVER *TSTIDS CONSOLE TO *TST  

In this example, YV03 is in *TST and YVO2 is in *TSTIDS







Additional Information

GRANT AUTHORITY is doc'ed in VM:Secure's Reference guide at:


https://docops.ca.com/ca-vm-secure-for-z-vm/3-2/with-security-mgmt/en/reference/command-reference/grant-authority-command



The CA VM:Secure GRANT AUTHORITY command syntax is identical to the syntax of the CMS GRANT AUTHORITY command.


For an explanation of all parameters and options for the  GRANT AUTHORITY command, see the IBM CMS command reference documentation.