IBM Security Z Security

 View Only

 Command Verifier Policy Profile for group Connect and Protected User

Bill Arrowsmith's profile image
Bill Arrowsmith posted Fri December 12, 2025 02:59 AM

Hello,

zSecure Command Verifier includes the capacity to implement controls of Connect commands based on a number of user attributes. The documented attributes include Special, Operations, Auditor and so on. 

We have a situation where we would like to prevent PROTECTED users from being connected to certain groups. Is this possible? 

Thank you,

   Bill

Tom Zeehandelaar's profile image
Tom Zeehandelaar posted Fri December 12, 2025 03:42 AM

Hi Bill,

the current version of Command Verifier does not support a policy profile to allow or disallow protected user IDs to be connected to certain groups. But I can see the added value of such a capability to be supported. Naturally, you are welcome to open an idea to request adding a Command Verifier policy profile that enables you to control whether protected user IDs can be connected to groups. Please also provide the business justification that outlines why your company would like such a policy profiles to be supported in a future release of zSecure Command Verifier. 

Related Content