Profile has ACIDS = RYPP and also XA Acid = RYPP in Top Secret

book

Article ID: 143828

calendar_today

Updated On:

Products

CA Top Secret CA Top Secret - LDAP

Issue/Introduction

A profile has both of the following for the same acid. Is this redundant?  Why would a profile have the following?

ACIDS      = I321        I324        RYPP

However, the profile also has that acid cross authorized.

XA ACID    = RYPP                                          OWNER(RYPP    )

  

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

The ACIDS = means that those acids have been given the profile.
Each of these acids has the profile and would be given all the permits/accesses, etc in the profile.
ACIDS    =    ABCD         WXYZ        RYPP       RXXW

The following is a Cross Authorization.
This means that anyone that has this profile can submit batch jobs using acid RYPP without having to supply a password.
XA ACID    = RYPP                                          OWNER(RYPP    )


There is no overlapping of permits or redundant commands.