Authorizing IDs for using RRSAF

When started, WLM-established address spaces use the Resource Recovery Services attachment facility (RRSAF) to attach to Db2. You must authorize the IDs that are associated with WLM-established stored procedures address spaces so that they can use RRSAF.

Procedure

To authorize user IDs that are associated with WLM-established stored procedures address spaces to use RRSAF:

  1. Create a ssnm.RRSAF profile in RACF®.
    For example, you can define ssnm.RRSAF in the DSNR resource class with a universal access authority of NONE by issuing the following command: 
    RDEFINE DSNR (DB2P.RRSAF  DB2T.RRSAF) UACC(NONE)
  2. Refresh the in-storage profiles with the profile that you just defined.
    For example, you can issue the following command: 
    SETROPTS RACLIST(DSNR) REFRESH
  3. Add user IDs that are associated with WLM-established stored procedures address spaces to the RACF-started procedures table.
    For example, you can issue the following command: 
    RDEFINE STARTED DSNWLM.**  STDATA(USER(SYSDP)   GROUP(DB2SYS)  TRUSTED(NO))
  4. Refresh the in-storage profiles.
    For example, you can issue the following command: 
    SETROPTS RACLIST(STARTED) REFRESH
  5. Grant read access to ssnm.RRSAF to the IDs that are associated with the stored procedures address spaces.
    For example, you can issue the following command: 
    PERMIT  DB2P.RRSAF  CLASS(DSNR) ID(SYSDSP)  ACCESS(READ)