Profile has ACIDS = RYPP and also XA Acid = RYPP in Top Secret


Article ID: 143828


Updated On:


CA Top Secret CA Top Secret - LDAP


A profile has both of the following for the same acid. Is this redundant?  Why would a profile have the following?

ACIDS      = I321        I324        RYPP

However, the profile also has that acid cross authorized.

XA ACID    = RYPP                                          OWNER(RYPP    )



Release : 16.0

Component : CA Top Secret for z/OS


The ACIDS = means that those acids have been given the profile.
Each of these acids has the profile and would be given all the permits/accesses, etc in the profile.
ACIDS    =    ABCD         WXYZ        RYPP       RXXW

The following is a Cross Authorization.
This means that anyone that has this profile can submit batch jobs using acid RYPP without having to supply a password.
XA ACID    = RYPP                                          OWNER(RYPP    )

There is no overlapping of permits or redundant commands.