Top Secret ADMINBY

Products

• Top Secret

Issue/Introduction

If a user has a particular profile associated with UNTIL(mm/day/year) what causes this to show on the TSS LIST command?

 

Environment

Release : 16.0

Component :

Resolution

The Security Admin issued the command:

TSS ADD(acid) PROF(XXXX) UNTIL(MM/DD/YY)

If you have the ADMINBY control option set, there will be ADMINBY
information stored when an ACID is CREATEd, when FACILITY is ADDed,
and when resources are PERMITTed. when you list the profile, the
ADMINBY information will include:
* Administrative ACID who performed the change
* Date, time and system SMFID where the change was performed
 
To see if you have the ADMINBY control option set, you can issue
TSS MODIFY and look for ADMINBY(YES). (If you see ADMINBY(NO), then
this is not set.)
 
If ADMINBY is not set, and the TSS recovery file has not wrapped
since the changes were made, you can run TSSAUDIT with CHANGES
to see what changes have been made. Since it is a specific profile
you are looking for, you can specify CHANGES STRING(prof)
where 'prof' is the profile acid. This will restrict the output to
only those changes containing the specific string.