Resource security checking by CICS and RACF

CICS® uses RACF® to protect the resources that you can access through a CICS application program.

CICS and RACF resource checking summary
You use the CICS resource system initialization parameters to specify the RACF class name.
RESSEC transaction resource security parameter
Specifying RESSEC(YES) in the definition of a transaction, together with the appropriate resource classes defined in the system initialization parameters, introduces another layer of security checking in addition to transaction-attach security.
The RESSEC system initialization parameter
You can force the effect of RESSEC=YES for all CICS transactions by specifying the RESSEC=ALWAYS system initialization parameter.
Authorization failures
If a terminal user is not authorized to access the resource specified on a CICS command, CICS returns the NOTAUTH condition to the application program.
Logging RACF audit messages to SMF

Parent topic: Resource security

Related tasks

Defining generic profiles for resources

Related reference

Resource and command check cross-reference

Last updated: Sunday, 27 December 2020 23:05