Resources protected by the FACILITY general resource class

The FACILTY general resource class is used to protect several different system resources.

They are:
Library lookaside (LLA) libraries
The FACILITY class controls a program's ability to use the LLACOPY macro. For more information, see Authorizing access with the MVS library lookaside (LLA) facility.
The CICS interregion communication program, DFHIRP
The FACILITY class controls a region's ability to log on to the CICS interregion communication program, DFHIRP. For more information, see Implementing MRO security.
Shared data tables
The FACILITY class controls a file-owning region's ability to act as a shared data table server. For more information, see Security for CICS shared data tables.
Coupling facility data tables
The FACILITY class controls the following:
  • The ability of a CICS region to connect to a coupling facility data table (CFDT)
  • The ability of the CFDT server to act as a server for a CFDT pool
  • The ability of the CFDT server region to connect to the coupling facility list structure for its CFDT pool
ability of a coupling facility data table (CFDT) server to act as a server for a CFDT pool. It also controls the server's access to the coupling facility list structure for the pool. For more information, see Security for coupling facility data tables.
Named counter servers
The FACILITY class controls the following:
  • The ability of a CICS region to connect to a named counter server
  • The ability of the named counter server to act as server for a named counter pool
  • The ability of the named counter server region to connect to the coupling facility list structure for its named counter pool
For more information, see Authorizing access to named counter pools and servers.
Shared temporary storage
The FACILITY class controls the following:
  • The ability of a CICS region to connect to a shared temporary storage (TS) server
  • The ability of the shared TS server to act as server for a shared TS pool
  • The ability of the shared TS server region to connect to the coupling facility list structure for its shared TS pool
For more information, see Authorizing access to the temporary storage pools.
Log streams
The FACILITY class controls the ability of a CICS region to connect to the coupling facility list structures used for MVS log streams. For more information, see Authorizing access to MVS log streams.
AUTHTYPE and COMAUTHTYPE userids in DB2® definitions
The FACILITY class controls the following:
  • The ability of users to install DB2CONN and DB2ENTRY definitions that specify the AUTHID or COMMAUTHID attributes
  • The ability of users to use a CREATE DB2CONN or CREATE DB2ENTRY command that specifies the AUTHID or COMMAUTHID attributes
  • The ability of users to change the AUTHID or COMMAUTHID attributes of an installed DB2CONN or DB2ENTRY
For more information, see Controlling access to DB2-related resources in CICS.
CICSPlex® SM resources
The FACILITY class controls access to a many CICSPlex SM resources. For more information, see Implementing CICSPlex SM security.