I know this has been the subject of recent discussion & I said that we have a process to override this for defined virtual machines. However, for a number of reasons, (mainly keeping up with identifying them), this is giving us some difficulty.
Our VM systems are now very different beasts to when the original rules were defined so I am talking to our internal security about lengthening the period of inactivity before automatic revoke. They are sympathetic but asked me to investigate if the inactivity time-out can be different dependant on RACF group or if it is a system wide limit. As far as I know, it is a system wide limit but I would be pleased if someone can confirm or deny this. Colin Allinson Amadeus Data Processing GmbH
