Mainframe Enablers TimeFinder SnapVX and zDP 8.5 Product Guide

The normal flow of zDP command processing with zDP Two-Actor Security enabled is as follows.

1. The requester who wants to run a command or command sequence that includes commands requiring authorization, submits the command sequence to an approver. The requester also provides the date and hour of the start of a time window within which the requester is going to run the command sequence. Optionally, the requester can validate the command sequence before submitting it for approval.
2. The approver reviews the command sequence for appropriateness, possibly by consulting other designated personnel with the necessary knowledge.
3. The approver takes one of the following actions:
   • If the request is approved:
     1. The approver generates a zDP Two-Actor Security token.
     2. The approver uses the token and the requested time window to define a security system resource that uniquely represents the request. In the resource name that is defined to the security system, the approver substitutes the date and hour values that are set by the token generation program with the requested date and hour.
     3. The approver notifies the requester that the requester is allowed to run the command sequence within the limited time window starting with the requested time.
        NOTE:The default time window is one hour.
   • If the request is denied, the approver notifies the requester. The requester is not allowed to run the command sequence in the zDP environment.
4. After the approval is obtained, the requester runs the authorized command or command sequence.