Suggested CARLa program solution – Baseline report for SPECIAL attribute

When running this program you find an extensive list of other user IDs that possess the system-wide SPECIAL attribute. On a production system, the next step is to verify which user IDs are approved to possess the attribute. When the SPECIAL attribute is approved, include the pertinent user ID in an EXCLUDE statement before the next run. All remaining system-wide SPECIAL attributes must be removed or alternatively the pertinent user IDs must request and receive management approval at this stage.

 

 

Continue with Revalidating privileges

 

© Copyright IBM Corp. 2012, 2020

IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.