Approver Groups

Contents
ce17
Contents
Approver groups
are used with package processing. A package is similar to a request data set in that it contains one or more
CA Endevor SCM
actions which are to be performed. However, a package may require approval before it can be executed. Approval is "electronic sign-off" for the package. Packages can be approved or denied by people who have been identified as approvers. An approver group is simply a particular subset of those people.
The C1DEFLTS parameter APRVFLG can be set to 'no' to turn off the package processing requirement.
Approver groups can be defined externally or internally to
CA Endevor SCM
. When a group is defined internally, all approver user IDs are stored in the master control file along with the approver group definition. When a group is defined externally, the approver group definition is stored in the master control file and the approver user IDs are stored in the external security product in use at your site. If you want to define a user ID as required to approve packages, you must use an internal approver group.
When using external approver groups, the
CA Endevor SCM
approver group name must be the same name as the group defined to the external security product.
When creating approver groups, you can specify the following:
  • A quorum size. This is the minimum of approvers from the group who must approve a package before it can be executed.
  • Required approvers. For example, if you want the project leader for a development group to approve all changes to the software with which the group is working, you can designate the project leader as a required approver.
    Since external groups don't have any approvers defined locally to
    CA Endevor SCM
    , required approvers are not applicable for these groups.
Any required approvers in an approver group must approve a package before it can be executed. Even if the quorum requirements are met, if a required approver has not yet approved a package, it cannot be executed.
There are three types of approver groups:
  • Standard approver groups can only approve standard packages.
  • Emergency approver groups can only approve emergency packages.
  • Dynamic approver groups can only be assigned to approve a package while the package is in the in-approval state.
When an approver group is related to a particular inventory area, then the group must approve packages containing actions that affect elements in that inventory area. An inventory area consists of a logical classification (system, subsystem, and type) within a
CA Endevor SCM
location (environment and stage).
Multiple approver groups can be associated with one inventory area. A single approver group can be associated with many inventory areas.
Once an approver group has been related to an inventory area, all processing for that inventory area must be performed using packages. You can exempt certain actions from this restriction by using the
CA Endevor SCM
Optional Features Table.
External Approver Groups and RACF
In the case that the
CA Endevor SCM
group matches the name of an existing RACF group, you will not need to do anything more. All users that are currently connected to that RACF group will be approvers. If the
CA Endevor SCM
approver group name does not match an existing RACF group, you will need to have the RACF Administrator create a new group, using the ADDGROUP command. You will then need to provide a list of users which will be associated with the group. Your RACF Administrator will need to CONNECT those users to the new group. If a user is to be connected to more than one access group be sure the RACF system option GRPLISTis activated. GRPLIST activates a list-of-groups access checking. A user's access authority is based upon the authority of all groups to which the user is connected.
For more information, see your site's RACF administrator.
External Approver Groups and CA Top Secret
If you are using CA Top Secret for your external security package, to set up external approver groups, you must define an IBMGROUP, and permit users, profiles, or both to it. The name of the IBMGROUP should match with the name of the
CA Endevor SCM
Approver Group.
In the following example, the IBMGROUP is 'External' and it associates the QA Profile group of users to that IBMGROUP. ADD(dept) is the department acid you want to own the resource and PERMIT(acid) is the user acid you want to permit it to. The PERMIT(acid) can be an attached profile or the ALL record if all users should have access.
The following is an example of the IBMGROUP in CA Top Secret:
TSS ADD(dept) IBMGROUP(EXTERNAL)
 <=== must match 
CA Endevor SCM
 approver group name
TSS PERMIT(acid) (QA) IBMGROUP(EXTERNAL)
             
¬ ¬
PROFILE Associates the QA profile group of
users to the IBMGROUP External
External Approver Groups and CA ACF2 for z/OS
To create an external approver group under CA ACF2 for z/OS Security, you must set up resource class ENDAPR and write rules to allow access to the ENDAPR resources (approver groups) by the users that belong to the groups.
The following are sample ACF2 commands that will define the ENDAPR resource class to CA ACF2 for z/OS Security. Substitute your values for lowercase items.
SET CONTROL(GSO) INSERT CLASMAP.endapr RESOURCE(ENDAPR) RSRCTYPE(end) ENTITYLN(16)
For improved performance, it is suggested that the ENDAPR resource class be made resident by adding it to the INFODIR record. If masked rule keys are used, this is required.
CHANGE INFODIR TYPES(R-Rend)
To activate these records, issue the following console command:
F ACF2,REFRESH(ALL)
If the ENDAPR resource class was made resident, any modifications to the resource rules will not be active until the following console command is issued:
F ACF2, REBUILD(end)
The following sample rules would create two approver groups:
  • endgrp1
  • endgrp2.
In this example, user1, user2, and user3 would belong to endgrp1; all users would belong to endgrp2.
$KEY(endgrp1) TYPE(end)  UID(user1) ALLOW  UID(user2) ALLOW  UID(user3) ALLOW $KEY(endgrp2) TYPE(end)  UID(*) ALLOW
Use the appropriate UID string for your site and the UID string in the rule can be masked. If your site has any questions, contact your local CA ACF2 for z/OS Security Support.
Approver Group Request Panel
Use option 9, Approver Group, from the Environment Options Menu to maintain the approver groups defined to a particular environment. When you select option 9,
CA Endevor SCM
returns the Approver Group Request panel.
Use the Approver Group Request panel to perform the following actions:
  • Display the current definition of a specified approver group.
  • Display a selection list of current approver groups.
  • Delete an approver group.
  • Create an approver group.
  • Update the definition of an approver group.
The following fields appear on the Approver Group Request panel:
  • Blank
    Use this field to display the current definition of a specified approver group.
  • #
    Use this field to delete an approver group.
  • C
    Use this field to create an approver group.
  • U
    Use this field to update the definition of an approver group.
  • Environment
    Name of the environment in which the approver group you want is defined. The current environment is displayed initially. Fill in a new name and press Enter if the approver group is in a different environment.
  • Approver Group
    The name of the approver group you want to use. To update or delete an approver group, fill in the full name and press enter to directly access the Approver Group Definition panel. If you leave the approver group name blank or use a name mask,
    CA Endevor SCM
    returns an Approver Group Selection List showing the approver groups currently defined.
Display an Approver Group Definition
To display the current definition of a particular approver group
  1. Enter the name of the approver group you want to display in the APPROVER GROUP field.
  2. Verify that the approver group you want to display is defined to the current environment in the ENVIRONMENT field. If the approver group you want to display is defined to a different environment fill in the correct environment name.
  3. Press Enter.
    The Approver Group Definition panel displays.
  4. When you have finished viewing the approver group definition, press the END key to return to the Approver Group Request panel.
    Note:
    To display an approver group definition from the Approver Group Selection List, type an
    S
    to the left of the name of the approver group you want to display and press Enter. The Approver Group Definition panel displays.
Display an Approver Group Selection List
To display a selection list of approver groups
  1. Leave the APPROVER GROUP field blank.
  2. Press Enter. The Approver Group Selection List panel displays.
Delete an Approver Group Definition
When you delete an approver group, any associated approver relate rules are also deleted.
To delete an approver group definition
  1. Enter the name of the approver group you want to delete in the APPROVER GROUP field or leave the field blank to obtain a list of available approver groups.
  2. Enter a # in the OPTION field.
    • The Approver Group Definition panel displays if you have specified an approver group in the APPROVER GROUP field. If the Approver Group Definition panel displays, proceed to Step 5.
    • The Approver Group Selection List panel displays if you have left the APPROVER GROUP field blank. If the Approver Group Selection List panel displays, proceed to Step 4.
  3. From the Approver Group Selection List panel type # to the left of the name of the approver group you want to delete and press ENTER. The Approver Group Definition panel displays.
  4. Review the information on the Approver Group Definition panel to verify that you want to delete it.
  5. Press Enter to complete processing.
    The approver group you specified and any associated approver relate rules are deleted.
Create an Approver Group Definition
To create an approver group definition
  1. Enter the name of the approver group you want to create in the APPROVER GROUP field. If this is to be an external approver group, the name of the group must match an existing profile in your security product.
     
    Note:
    If you are using CA Top Secret for z/OS, the IBMGROUP resource definition must be used.
  2. Enter a C in the OPTION field.
    The Approver Group Definition panel displays.
  3. Specify the appropriate approver group information on the Approver Group Definition panel and press Enter to complete processing.
Update an Approver Group Definition
To update an approver group definition
  1. Enter the name of the approver group you want to update in the APPROVER GROUP field.
  2. Enter a U in the OPTION field
    The Approver Group Definition panel displays.
  3. Change the appropriate approver group information on the Approver Group Definition panel and press Enter to complete processing.
     
    Note:
    If you select more than one approver group, processing occurs in the order in which the names are listed.
Approver Group Selection List
The Approver Group Selection List panel displays when you use a
name mask
or do not specify an approver group on the Approver Group Request panel. You can use this panel to perform the following actions:
  • Display an approver group definition.
  • Delete an approver group definition.
  • Update an approver group definition.
The following fields appear on the Approver Group Selection List panel:
  • Environment
    Display-only. The name of the current environment.
  • Selection (no title)
    Field used to select an approver group for display (S), deletion (#), or update (U). Type the appropriate character in this column, to the left of the approver group name(s) you want to process.
  • Approver Group
    Display-only. The names of the approver groups.
  • Approver Group Title
    Display-only. A descriptive title for the approver group.
Display an Approver Group Definition
To display the current definition of a particular approver group
  1. Enter the name of the approver group you want to display in the APPROVER GROUP field.
  2. Verify that the approver group you want to display is defined to the current environment in the ENVIRONMENT field. If the approver group you want to display is defined to a different environment fill in the correct environment name.
  3. Press Enter. The Approver Group Definition panel displays.
     
    Note:
    To display an approver group definition from the Approver Group Selection List, type an
    S
    to the left of the name of the approver group you want to display and press Enter. The Approver Group Definition panel displays.
  4. When you have finished viewing the approver group definition, press the END key to return to the Approver Group Request panel.
Delete an Approver Group Definition
When you delete an approver group, any associated approver relate rules are also deleted.
To delete an approver group definition
  1. Enter the name of the approver group you want to delete in the APPROVER GROUP field or leave the field blank to obtain a list of available approver groups.
  2. Type a # in the OPTION field.
  3. Press Enter.
    • The Approver Group Definition panel displays if you have specified an approver group in the APPROVER GROUP field. If the Approver Group Definition panel displays, proceed to Step 5.
    • The Approver Group Selection List panel displays if you have left the APPROVER GROUP field blank. If the Approver Group Selection List panel displays, proceed to Step 4.
  4. From the Approver Group Selection List panel type # to the left of the name of the approver group you want to delete and press ENTER. The Approver Group Definition panel displays.
  5. Review the information on the Approver Group Definition panel to verify that you want to delete it.
  6. Press Enter to complete processing.
    The approver group you specified and any associated approver relate rules are deleted.
Update an Approver Group Definition
To update an approver group definition
  1. Enter the name of the approver group you want to update in the APPROVER GROUP field.
  2. Type a U in the OPTION field.
  3. Press Enter.
    The Approver Group Definition panel displays.
  4. Change the appropriate approver group information on the Approver Group Definition panel.
  5. Press Enter to complete processing.
     
    Note:
    If you select more than one approver group, processing occurs in the order in which the names are listed.
Approver Group Definition Panel
The Approver Group Definition panel displays after you select the approver group that you want to display, create, update, or delete on the Approver Group Request panel or the Approver Group Selection List panel. Use this panel to complete the following actions:
  • Deletion of an approver group definition.
  • Creation of an approver group definition.
  • Update of an approver group definition.
The current processing option displays in the upper left corner. You can cancel any requests by pressing the End key.
The following fields appear on the Approver Group Definition panel:
  • Approver Group
    Display-only. The name of the approver group displayed, or to be created, updated, or deleted.
  • Environment
    Display-only. The name of the current environment.
  • Title
    A 1- to 50-character description for the approver group.
  • Quorum Size
    The minimum number of people in this group who must approve packages. For locally defined groups, acceptable values are 0 - 16. For externally defined groups, acceptable values 0 - 32760.
  • Approver
    For locally defined approver groups, the user IDs of the approvers in this group. For externally defined approver groups, leave all of the approver fields blank. This tells
    CA Endevor SCM
    to look externally for the user IDs that are part of this group.
  • Req'd (Y/N)
    Indicates whether this approver is required to approve the package: Y (yes) or N (no).
    This field is not valid for external approver groups.
Delete an Approver Group Definition
When you delete an approver group, any associated approver relate rules are also deleted.
To delete an approver group definition
  1. Enter the name of the approver group you want to delete in the APPROVER GROUP field or leave the field blank to obtain a list of available approver groups.
  2. Type a # in the OPTION field.
  3. Press Enter.
    • The Approver Group Definition panel displays if you have specified an approver group in the APPROVER GROUP field. If the Approver Group Definition panel displays, proceed to Step 5.
    • The Approver Group Selection List panel displays if you have left the APPROVER GROUP field blank. If the Approver Group Selection List panel displays, proceed to Step 4.
  4. From the Approver Group Selection List panel type # to the left of the name of the approver group you want to delete and press ENTER. The Approver Group Definition panel displays.
  5. Review the information on the Approver Group Definition panel to verify that you want to delete it.
  6. Press Enter to complete processing.
    The approver group you specified and any associated approver relate rules are deleted.
Create an Approver Group Definition
To create an approver group definition
  1. Enter the name of the approver group you want to create in the APPROVER GROUP field. If this is to be an external approver group, the name of the group must match an existing profile in your security product.
     
    Note:
    If you are using CA Top Secret for z/OS, the IBMGROUP resource definition must be used.
  2. Type a C in the OPTION field.
  3. Press Enter. The Approver Group Definition panel displays.
  4. Specify the appropriate approver group information on the Approver Group Definition panel.
  5. Press Enter to complete processing.
Update an Approver Group Definition
To update an approver group definition
  1. Enter the name of the approver group you want to update in the APPROVER GROUP field.
  2. Type a U in the OPTION field.
  3. Press Enter.
    The Approver Group Definition panel displays.
  4. Change the appropriate approver group information on the Approver Group Definition panel.
  5. Press Enter to complete processing.
     
    Note:
    If you select more than one approver group, processing occurs in the order in which the names are listed.
Dynamic Approver Group Panel
The Dynamic Approver option provides
CA Endevor SCM
package approvers with the ability to add additional approvers to a package while it is in the in-approval state. This enhances the approval process by allowing one or more individuals to be dynamically defined as one-time approvers for a particular package. This feature can be allowed or disallowed through the
CA Endevor SCM
Options table. By default, it is disallowed.
You can use the Dynamic Approver Group Panel to create, update, or delete a dynamic approver group. To access this panel, select DA-Dynamic Approvers on the Review Package panel.
If the dynamic approver group does not yet exist for the package, you can enter a value in the QUORUM field and specify from 1 to 16 approver user IDs and whether or not their approval is required.
If the dynamic approver group exists, this panel is preformatted with any existing dynamic approver group data. If the group has approved or denied the package, all fields are nonmodifiable. Otherwise, you can update or delete only those approver IDs that you entered, unless you are a superuser. Any entries where the approver has approved or denied the package are protected and are not modifiable even by a superuser. If the entry is modifiable, you can blank out the approver ID (effectively deleting the user ID from the dynamic approver group), type a new user ID over the existing one (effectively deleting the original user ID and replacing it with a new one), or update the APPROVAL REQ'D value. The QUORUM value can be updated at any time.
If a dynamic approver group is attached to a package and then deleted, the status of the package will not be updated, regardless of whether the dynamic approver group has actually approved or denied the package. The package will need to be reapproved by any attached approver groups.
When you press Enter, the panel is updated with any changes that you made on the panel. If you press PF3, any changes you made on the panel are ignored.
The following fields appear on the Dynamic Approver Group panel:
  • QUORUM
    Similar to the QUORUM value seen on the Approver Group Definition panel, this is the quorum size for the approver group. Valid values are 0 through 16. The quorum size cannot exceed the number of approvers on the panel. The quorum size cannot be 0 unless one or more approvers are required approvers. A user cannot change the quorum size in such a way that it alters the logical approval status of the group; that is, the quorum size must always be greater than the number of approvers who have approved the package thus far.
  • APPROVER
    TSO user ID of a dynamic approver. The ID must pass syntax checking: it cannot contain embedded spaces; it must consist solely of alphanumeric characters and #, @, and $; and it must not begin with a number.
  • REQ
    Indicates whether the approval of this approver is required. Valid values are Y, N, or blank. Blank defaults to N.
  • STATUS
    Indicates whether the approver has approved the package, and the time and date when the approval was performed.
  • ADDED BY
    Indicates the user ID that added this approver and the date and the time when the approver ID was added.
You do not have the option to provide a name or descriptive title for the dynamic approver group. The group created on this panel is named Dynamic Approver and its title is Dynamic Approver Group information.
Approver Group Relation Request Panel
Use option A from the Environment Options Menu to create or maintain approver group relationships. When you request option A from the Environment Options Menu,
CA Endevor SCM
returns the Approver Group Relation Request panel.
Use the Approver Group Relation Request panel to perform the following actions:
  • Display a list of all relationships.
  • Display the relationship between certain inventory areas and an approver group.
  • Delete a relationship between inventory areas and approver groups. When you delete a relationship, neither the approver group nor the inventory area is deleted; only the relationship between the two is deleted.
  • Create a relationship between an inventory area and an approver group.
  • Change the approver group for an inventory area.
The following fields appear on the Approver Group Relation Request panel:
  • Blank
    Use this field to display a list of relationships. To display all relationships, leave all fields, except ENVIRONMENT and APPROVER TYPE, blank. To restrict the display to certain portions of the inventory, enter additional information on the panel.
  • #
    Specify this option to delete a relationship. When you delete a relationship, neither the approver group nor the inventory area is deleted; only the relationship between the two is deleted.
  • C
    Specify this option to create a relationship. When you create a relationship, the approver group and inventory area involved must have been previously established within
    CA Endevor SCM
    . You are creating only the relationship.
  • U
    Specify this option to update a relationship. This option allows you to change the approver group for a given area of the inventory.
  • Environment
    Displays the name of the environment that contains the inventory area and the approver group to which the inventory area is (to be) related. If you want to change the environment, fill in the appropriate name and press Enter.
  • Approver Type
    Indicates the approver type for this approver group: standard or emergency. An approver group designated as standard can be used to approve standard packages only. Similarly, an approver group designated as emergency can be used only to approve emergency packages. You must enter the entire word when indicating approver type; that is, you cannot abbreviate the entry.
  • System
    Name of the system to which this approver group relationship applies.
  • Subsystem
    Name of the subsystem to which this approver group relationship applies.
  • Type
    The element type to which this approver group relationship applies.
  • Stage Number
    The stage number to which this approver group relationship applies.
Display a List of All Approver Group Relationships
To display a list of all relationships
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field. You must enter the entire word when indicating the approver type.
  3. Leave all remaining fields blank.
  4. Press Enter.
    The Approver Group Relationship List panel displays.
  5. When you have finished viewing the list of relationships press the END key to return to the Approver Group Relation Request panel.
Display a Relationship Between an Inventory Area and an Approver Group
To display the relationship between certain inventory areas and an approver group
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field. You must enter the entire word when indicating the approver type.
  3. Enter the appropriate information in the INVENTORY AREA fields. You can enter one of three values in these fields:
    • A full name. Enter a full name (number) in one or more fields, to indicate a specific system, subsystem, type, and/or stage number.
    • Blanks. Leave one or more fields blank to build a list of approver group relationships for the inventory areas matching the criteria entered.
    • An asterisk (*). Use an asterisk to relate an approver group to all systems, subsystems, types or stages in an environment.
    For example, if an approver group has been related to an inventory area with a system name of ABC and a stage number of 2, and with an asterisk as the subsystem and the type, then the approver group relationship applies to all elements in system ABC and Stage 2 -- regardless of subsystem and type.
     
    Note:
    To display a relationship from the Approver Group Relationship List panel, type an S to the left of the inventory area and press Enter to display the Approver Group Relationship panel.
  4. Press Enter.
    The Approver Group Relationship panel displays with all inventory areas matching the criteria you indicated and the approver groups related to these areas.
  5. When you have finished viewing the Approver Group Relationship panel, press the END key to return to the Approver Group Relation Request panel.
Delete a Relationship Between an Inventory Area and an Approver Group
To delete a relationship between inventory areas and approver groups
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field.
  3. Specify the inventory area to which the approver group is related in the INVENTORY AREA fields. You can obtain a list of all relationships by leaving these fields blank.
  4. Type a # in the OPTION field.
  5. Press Enter.
    If the Approver Group Relationship List panel displays, proceed to Step 6. If the Approver Group Relationship panel displays, proceed to Step 7.
  6. From the Approver Group Relationship List panel type a # to the left of the name of the inventory area for which you want to delete a relationship and press Enter. The Approver Group Relationship panel displays.
  7. Review the information on the Approver Group Relationship panel to verify that you want to delete this relationship.
  8. Press Enter to complete processing.
Create a Relationship Between an Inventory Area and an Approver Group
To create a relationship between an inventory area and an approver group
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field. You must enter the entire word when indicating the approver type.
  3. Specify the inventory area to which the approver group is related in the INVENTORY AREA fields. You must enter either a full name or an asterisk in each of these fields.
  4. Type a C in the OPTION field.
  5. Press Enter.
    The Approver Group Relationship panel displays.
  6. Enter the name of the approver group for which you want to build a relationship in the APPROVER GROUP field.
  7. Press Enter to complete processing.
Change the Approver Group for an Inventory Area
To change the approver group for an inventory area
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field. You must enter the entire word when indicating the approver type.
  3. Specify the inventory area to which the approver group is related in the INVENTORY AREA fields. You can obtain a list of all relationships by leaving these fields blank.
  4. Type a U in the OPTION field.
  5. Press Enter.
    If the Approver Group Relationship List panel displays, proceed to step 6. If the Approver Group Relationship panel displays, proceed to step 7.
  6. From the Approver Group Relationship List panel, type a U to the left of the name of the inventory area for which you want to change a relationship and press Enter.
    The Approver Group Relationship panel displays.
  7. On the Approver Group Relationship panel, enter the name of the approver group you want to relate to this inventory area in the APPROVER GROUP field.
  8. Press Enter to complete processing.
Approver Group Relationship List
The Approver Group Relationship List panel displays all inventory areas matching the criteria you indicate on the Approver Group Relation Request panel, and the approver groups related to these areas. Use this panel to perform the following actions:
  • Display a relationship between inventory areas and approver groups.
  • Delete a relationship between inventory areas and approver groups. When you delete a relationship, neither the approver group nor the inventory area is deleted; only the relationship between the two is deleted.
  • Change the approver group for an inventory area.
The following fields appear on the Approver Group Relationship List panel:
  • Environment
    The current environment.
  • Approver Type
    This field indicates whether this approver group type is emergency or standard.
  • System
    The system to which the approver group is related.
  • Subsystem
    The subsystem to which the approver group is related.
  • Type
    The type to which the approver group is related.
  • Stage Number
    The number of the stage to which the approver group is related.
  • Approver Group
    The approver group related to the inventory area. Note that a given inventory area may be related to several approver groups.
Display a Relationship Between an Inventory Area and an Approver Group
To display the relationship between certain inventory areas and an approver group
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field. You must enter the entire word when indicating the approver type.
  3. Enter the appropriate information in the INVENTORY AREA fields. You can enter one of three values in these fields:
    • A full name. Enter a full name (number) in one or more fields, to indicate a specific system, subsystem, type, and/or stage number.
    • Blanks. Leave one or more fields blank to build a list of approver group relationships for the inventory areas matching the criteria entered.
    • An asterisk (*). Use an asterisk to relate an approver group to all systems, subsystems, types or stages in an environment.
    For example, if an approver group has been related to an inventory area with a system name of ABC and a stage number of 2, and with an asterisk as the subsystem and the type, then the approver group relationship applies to all elements in system ABC and Stage 2 -- regardless of subsystem and type.
     
    Note:
    To display a relationship from the Approver Group Relationship List panel, type an S to the left of the inventory area and press Enter to display the Approver Group Relationship panel.
  4. Press Enter.
    The Approver Group Relationship panel displays with all inventory areas matching the criteria you indicated and the approver groups related to these areas.
  5. When you have finished viewing the Approver Group Relationship panel, press the END key to return to the Approver Group Relation Request panel.
Delete a Relationship Between an Inventory Area and an Approver Group
To delete a relationship between inventory areas and approver groups
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field.
  3. Specify the inventory area to which the approver group is related in the INVENTORY AREA fields. You can obtain a list of all relationships by leaving these fields blank.
  4. Type a # in the OPTION field.
  5. Press Enter.
    If the Approver Group Relationship List panel displays, proceed to Step 6. If the Approver Group Relationship panel displays, proceed to Step 7.
  6. From the Approver Group Relationship List panel type a # to the left of the name of the inventory area for which you want to delete a relationship and press Enter. The Approver Group Relationship panel displays.
  7. Review the information on the Approver Group Relationship panel to verify that you want to delete this relationship.
  8. Press Enter to complete processing.
Change the Approver Group for an Inventory Area
To change the approver group for an inventory area
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field. You must enter the entire word when indicating the approver type.
  3. Specify the inventory area to which the approver group is related in the INVENTORY AREA fields. You can obtain a list of all relationships by leaving these fields blank.
  4. Type a U in the OPTION field.
  5. Press Enter.
    If the Approver Group Relationship List panel displays, proceed to step 6. If the Approver Group Relationship panel displays, proceed to step 7.
  6. From the Approver Group Relationship List panel, type a U to the left of the name of the inventory area for which you want to change a relationship and press Enter.
    The Approver Group Relationship panel displays.
  7. On the Approver Group Relationship panel, enter the name of the approver group you want to relate to this inventory area in the APPROVER GROUP field.
  8. Press Enter to complete processing.
Approver Group Relationship Panel
The Approver Group Relationship panel displays after you select the approver group relationship you want to display, create, change, or delete on the Approver Group Relation Request panel or the Approver Group Relationship List panel. Use this panel to perform the following actions:
  • Complete the deletion of a relationship between an inventory area and an approver group. When you delete a relationship, neither the approver group nor the inventory area is deleted; only the relationship between the two is deleted.
  • Complete the creation of a relationship between an inventory area and an approver group.
  • Complete the change of an approver group for an inventory area.
You cancel a request by pressing the End key.
The following fields appear on the Approver Group Relationship panel. All fields are display-only, except the APPROVER GROUP field.
  • Environment
    This is the name of the current environment.
  • Approver Type
    This is the type of approver group you specified: emergency or standard.
  • Approver Group
    Name of the approver group to be related to this particular inventory area. Change the name of the approver group accordingly.
  • System
    This is the name of the system in the inventory area to which the approver group is related.
  • Subsystem
    This is the name of the subsystem in the inventory area to which the approver group is related.
  • Type
    This is the name of the element type in the inventory area to which the approver group is related.
  • Stage Number
    This is the stage number in the inventory area to which the approver group is related.
Delete a Relationship Between an Inventory Area and an Approver Group
To delete a relationship between inventory areas and approver groups
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field.
  3. Specify the inventory area to which the approver group is related in the INVENTORY AREA fields. You can obtain a list of all relationships by leaving these fields blank.
  4. Type a # in the OPTION field.
  5. Press Enter.
    If the Approver Group Relationship List panel displays, proceed to Step 6. If the Approver Group Relationship panel displays, proceed to Step 7.
  6. From the Approver Group Relationship List panel type a # to the left of the name of the inventory area for which you want to delete a relationship and press Enter. The Approver Group Relationship panel displays.
  7. Review the information on the Approver Group Relationship panel to verify that you want to delete this relationship.
  8. Press Enter to complete processing.
Create a Relationship Between an Inventory Area and an Approver Group
To create a relationship between an inventory area and an approver group
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field. You must enter the entire word when indicating the approver type.
  3. Specify the inventory area to which the approver group is related in the INVENTORY AREA fields. You must enter either a full name or an asterisk in each of these fields.
  4. Type a C in the OPTION field.
  5. Press Enter.
    The Approver Group Relationship panel displays.
  6. Enter the name of the approver group for which you want to build a relationship in the APPROVER GROUP field.
  7. Press Enter to complete processing.
Change the Approver Group for an Inventory Area
To change the approver group for an inventory area
  1. Specify an environment in the ENVIRONMENT field.
  2. Indicate whether the approver group type is standard or emergency in the APPROVER TYPE field. You must enter the entire word when indicating the approver type.
  3. Specify the inventory area to which the approver group is related in the INVENTORY AREA fields. You can obtain a list of all relationships by leaving these fields blank.
  4. Type a U in the OPTION field.
  5. Press Enter.
    If the Approver Group Relationship List panel displays, proceed to step 6. If the Approver Group Relationship panel displays, proceed to step 7.
  6. From the Approver Group Relationship List panel, type a U to the left of the name of the inventory area for which you want to change a relationship and press Enter.
    The Approver Group Relationship panel displays.
  7. On the Approver Group Relationship panel, enter the name of the approver group you want to relate to this inventory area in the APPROVER GROUP field.
  8. Press Enter to complete processing.
Locking and Approver Groups
The element locking feature of
CA Endevor SCM
provides additional protection for inventory areas in addition to that provided by approver groups and approver group relationships. Consider the following two examples:
Example: Use Locking to Add Elements
In this example, user 1 defines package PKG1 with two Add actions. Add number 1 is to an inventory area protected by an approver group, while Add number 2 is to an area with no associated approver group. User 1 casts and approves PKG1.
User 2 then modifies the external files referenced in the two Add actions, and submits SCL to Add the elements, without including the SCL in a package.
When Locking=OFF:
  • The first Add statement in the SCL for user 2 fails because an approver group protects the target inventory area and the Add statement is not part of a package. The second Add statement completes successfully because no approver group protects the target inventory area, and locking is off.
  • User 1 then executes package PKG1, and both Add actions fail with PKMR515E and PKMR516E messages informing User 1 of an integrity error because the file has been modified since he cast package PKG1.
When Locking=(ON,Y):
  • Both Add statements in the SCL for user 1 fail because the element names at the target inventory locations have been locked by the cast of package PKG1.
  • When User 1 then executes package PKG1, both Add actions fail with PKMR515E and PKMR516E messages.
In this example, PKG1 fails execution whether locking is ON or OFF. Locking, however, does prevent the changed file in Add #2 from being added to
CA Endevor SCM
.
Example: Use Locking to Move Elements
In this example, a site has a four-stage development life cycle, with a map that moves from STG1→STG2→STG4. An approver group protects STG4. User 1 defines package PKG2 to move element ELM1 from STG2→STG4.
After User 1 casts and approves PKG2, User 2 retrieves element ELM1, modifies it, adds it back to
CA Endevor SCM
, and tries to move it back into STG2.
With Locking=OFF:
  • The move back into STG2 is successful. User 2 then submits SCL to move ELM1 to STG4 but does not include the SCL in a package. User 2's SCL fails because the STG4 inventory area is protected by an approver group.
  • User 1 then executes package PKG2, and this move also fails with a PKMR512E message informing User 1 of an element level mismatch.
With Locking=(ON,Y):
  • User 2's move back into STG2 fails because the element names at the source and target inventory locations have been locked by the cast of package PKG2.
  • User 1 then executes package PKG2, and this move succeeds because element ELM1 at STG2 has been protected from modification by locking.