ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

What acid type can the Top Secret CONSOLE ACID attribute can be added?

book

Article ID: 226897

calendar_today

Updated On:

Products

Top Secret

Issue/Introduction

Questions:

1) Is the TSS ADDTO(ACID) CONSOLE command for the CONSOLE attribute restricted to TSS admin acids (DCA,VCA,ZCA,SCA etc)?

2) Can attribute CONSOLE be granted to a PROFILE acid? Can a  TYPE(USER) acid regular with no TSS admin authority issue TSS MODIFY or the console equivalent /F TSS... commands to alter critical Control Options 

3) Where is it documented that the CONSOLE attribute is required to shutdown Top Secret.

Environment

Release : 16.0

Component :

Resolution

1) Is the TSS ADDTO(ACID) CONSOLE command for the CONSOLE attribute restricted to TSS admin acids (DCA,VCA,ZCA,SCA etc)?

Answer:

It can be added to non-admin type acids.

2) Can attribute CONSOLE be granted to a PROFILE acid? Can a  TYPE(USER) acid regular with no TSS admin authority issue TSS MODIFY or the console equivalent /F TSS... commands to alter critical Control Options 

Answer:

CONSOLE attribute can be added to PROFILE type acid. Any acid with the CONSOLE attribute will be able to issue the TSS MODIFY commands to display or change any Top Secret Control Option.

3) Where is it documented that the CONSOLE attribute is required to shutdown Top Secret.

Powered by Wolken Software