CA Top Secret for z/OS r15 What access is needed to allow a SCA acid reset the Master MSCA acid?

Article Id: 32461
Status: Published
Updated On: 14-02-2018 08:27
Legacy Id: TEC1873257
Products:
CA Top Secret , CA Top Secret - LDAP
Issue/Introduction:

Question:

What access is needed to allow an SCA acid to reset the password for the Master (MSCA) acid?
 

Answer:

To set a new password for the MSCA using ADDTO or REPLACE,
an SCA must have UPDATE access to entity TSSCMD.USER.cmd.MSCAPW in the
CASECAUT class, Where 'cmd' is the command being issued.

For example:
TSS PERMIT(msca_acid) CASECAUT(TSSCMD.USER.REPLACE.MSCAPW) ACCESS(UPDATE)
or
TSS PER(msca_acid) CASECAUT(TSSCMD.USER.ADD.MSCAPW)  ACCESS(UPDATE)
 

Additional Information:

CA Top Secret Security for z/OS r15.0 Users Guide: 
Chapter 6 Section Restricted Administrative Authorities
https://support.ca.com/cadocs/0/CA%20Top%20Secret%20%20Security%20for%20z%20OS%20r15-ENU/Bookshelf_Files/PDF/TSS_User_zOS_ENU.pdf                                                        

Environment:

Release: TOPSEC00200-15-Top Secret-Security
Component: