ACID type restricted for Top Secret CONSOLE attribute
Article ID: 226897
Updated On:
Products
Issue/Introduction
Questions:
1) Is the TSS ADDTO(ACID) CONSOLE command for the CONSOLE attribute restricted to Top Secret administrator ACIDs (DCA,VCA,ZCA,SCA etc)?
2) Can the CONSOLE attribute be added to a PROFILE acid? Can a TYPE(USER) ACID with no Top Secret administrative authority issue TSS MODIFY or the console equivalent /F TSS... commands to alter critical Control Options
3) Where is it documented that the CONSOLE attribute is required to shutdown Top Secret.
Environment
Release : ALL
Component :
Resolution
1) Is the TSS ADDTO(ACID) CONSOLE command for the CONSOLE attribute restricted to TSS admin acids (DCA,VCA,ZCA,SCA etc)?
Answer:
It can be added to non-admin type acids.
2) Can attribute CONSOLE be granted to a PROFILE acid? Can a TYPE(USER) acid regular with no TSS admin authority issue TSS MODIFY or the console equivalent /F TSS... commands to alter critical Control Options
Answer:
Yes. The CONSOLE attribute can be added to PROFILE type acid. Any acid with the CONSOLE attribute will be able to issue the TSS MODIFY commands to display or change any Top Secret Control Option.
3) Where is it documented that the CONSOLE attribute is required to shutdown Top Secret?
Answer:
Feedback
