On 16 May 2016 at 15:47, Jerry Whitteridge <jerry.whitteri...@safeway.com> wrote: > I'd reply to the Auditor "Please define Admin access as there is no one > privilege that grants all access"
But there are several -- perhaps many -- privileges that grant access to grant all access. For instance, anyone with READ access to BPX.FILEATTR.APF in the FACILITY class can own your entire system. Tony H. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN