ACFCMD resource validation for privileged logonids in ACF2

Products

• ACF2 - z/OS

Issue/Introduction

Can a logonid CANCEL or SUSPEND another logonid with administrative privileges using ACFCMD resource validation?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

The logonid can only use ACFCMD resource validation for other logonids who do not have these special administrative privileges:

- SECURITY
- ACCOUNT
- AUDIT
- LEADER
- CONSULT

As an example, a logonid with AUDIT privilege can only issue change command to cancel or suspend another normal logonid/user without any special privileges as mentioned above.