Security maintenance utility (Interactive mode)

The ctmsec Control‑M Security Maintenance utility defines users in the Control‑M Security database and assigns authorizations required for working with Control‑M using the Control-M Configuration Manager. ctmsec runs on the Control-M/Server computer.

Changes made by this utility are implemented only after you exit the utility.

Users can be defined as part of a group. Authorizations can be specified for a specific user, for a group, or for both. See Security maintenance utility (Batch mode).

When assigning a user to a group, the following rules apply:

• If there are no authorizations defined for the user, the user inherits the authorizations for the group.
• If there are authorizations defined for a user, these authorizations take precedence.
• When defining an authorization for a user (for example, Folder), use of the (D)efault setting enables the specific authorization (for example, Read) defined for the group.
• If all of a user’s authorizations for a specific Control‑M element (for example, Folder) are defined with a (D)efault setting, the user’s authorizations for that element can be deleted more efficiently.
• Authorizations not specifically defined for a group, or for a user not belonging to a group, revert to the Full Security parameter setting. See ctmsys

Certain functions of the ctmsec utility can be activated directly from a command line. For more information, see Security maintenance utility (Batch mode). In addition, certain functions of the ctmsec utility can be activated using the Control-M Configuration Manager. For more information, see Control-M security.

The security of Sub Folders and jobs within Sub Folders is determined according the security that is set for SMART folders.