To utilize the Security Rules Optimization feature, a system administrator can assign security codes to 100 pre-defined user groups. User groups are created in the Group Security Maintenance (SYS603) program. All users assigned to this group possess the same level of security.
A system administrator can assign security codes for up to 100 of the user groups. All user groups over 100 are still administered by all security reject/allow rules assigned to them but are not able to utilize the optimized process.
Each of the security codes and access levels are assigned to user groups and are mapped to the account strings and stored in the Account Cross Reference (CEA106D1) file.
Once security codes have been assigned, the system administrator must:
-
Determine which level each group is allowed access.
-
Determine which segment values/account strings are assigned to which user groups.
-
Create security rules for specific segment values/account strings and assign these groups to the created rules.
-
Select the rules to be processed. Processing can be done in either batch mode or interactively.
-
The Security Rules flag must be on in the CEA Control Parameters program before any rules are effective.