Creating ESM resources

BMC AMI Security Policy Manager uses generic resource profiles or rules for RACF, Top Secret (TSS), or ACF2 (with SPE2107) external security managers to control access to the following:

  • Browser interface
  • Access to Security Policy Manager
  • Specific Security Policy Manager functions

Related topic

Installation-overview

You define the class in which the profiles are defined during configuration. By default, they are defined in the FACILITY class.

The required profiles depend on which features of Security Policy Manager are in use, but as a minimum, all users who have access to the Security Policy Manager browser-based applications must have READ access to RSM.RSS.LOGIN and RSM.RSS.SPM. The remaining profiles required for each feature are described in detail in the Configuring-ESM-definitions and Defining-the-started-task-to-the-ESM topics.

During installation, if you add the Security Policy Manager ESM resources to a class other than FACILITY, specify the class on the ClassName parameter in the configuration member.

Where to go from here

After creating ESM resources, configure ESM definitions and define the started task to the ESM.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*