In a multi-LPAR environment, where DASD devices are shared, using ACF2 shared databases can be beneficial. Benefits include:
- Security administration workload is reduced. You only need to maintain records on one set of databases instead of several databases.
- Security administration time is reduced. Because you have to maintain fewer records, you need less maintenance time. Administration time normally spent in switching from system to system is also saved.
- Accuracy and organization of records is increased. In most cases, you must only check one set of records for accuracy. Having fewer records to maintain also makes it easier for you to locate information.
- Easier to maintain. If you work with several operating systems, you need to be concerned with only one logonid record and one password.
When creating a rule entry, it is important to include environment parameters. These parameters define what can be accessed, who has access, and when access is permitted. By introducing the SYSID environment parameter, you can now identify the specific system that that the rule entry applies to. This enhancement helps make ACF2 rules more granular.
For more information, see the following articles:
------------------------------
Laura Fletcher
Staff Technical Writer
Broadcom
Illinois
------------------------------