OpenVMS System Management Guide, 2nd Edition
This complete text details the tools, technologies and techniques that can configure, maintain, and tune computers running Hewlett-Packard's high-performance OpenVMS operating system.
TABLE OF CONTENTS OpenVMS System Management Guide, 2nd Edition
Appendix D: OpenVMS Privileges
OpenVMS privileges are separated into the following six categories:
| OPENVMS CATEGORY | Meaning |
|---|---|
| NORMAL | Grants normal privileges |
| GROUP | Grants access to users in the same UIC group |
| DEVOUR | Provides potential to consume system resources |
| SYSTEM | Potentially affects system processes and resources |
| FILE | Allows user to bypass file security |
| ALL | Allows user complete system access |
The purpose of the following tables is to give you an idea of the DCL functions enabled by various privileges. These are arranged in ascending order so that, for instance, a user with DEVOUR privilege also has GROUP and NORMAL privileges
| Privilege | Allowed Functions | Description |
|---|---|---|
| NETMBX | $ SET HOST | Creates an interactive login to a remote system |
| TMPMBX | $ SPAWN | Creates a subprocess |
| GROUP | $ SHOW ENTRY $ STOP PROCESS $ SET PROCESS | Affect objects in the same UIC group |
| GRPPRV | File operations | Access files in the same UIC group via SYSTEM access category |
| Privilege | Allowed Functions | Description |
|---|---|---|
| ACNT | $ RUN/DETACHED/NOACC | Bypass VMS accounting |
| ALLSPOOL | $ ALLOCATE device | Allocate a spooled device |
| BUGCHK | N/A | Create bug-check error log entries |
| EXQUOTA | $ CREATE | Exceed disk quota |
| GRPNAM | $ DEFINE/GROUP $ DISMOUNT/GROUP $ MOUNT/GROUP | Define group logical names |
| PRMCEB | N/A | Create permanent common event flag blocks |
| PRMGBL | $ INSTALL | Create and map global sections |
| PRMMBX | N/A | Create permanent mailboxes |
| SHMEM | N/A | Control multiport memory |
| Privilege | Allowed Functions | Description |
|---|---|---|
| DIAGNOSE | $ SET HOST/DUP $ SET HOST/HSC | Run online diagnostic programs |
| VOLPRO | $ DISMOUNT/ABORT $ INITIALIZE | Override volume... |
Copyright Lawrence L. Baldwin, Jr. 2004 under license agreement with Books24x7
