Allowing a TSO/E User to CANCEL All Jobs Originating from Local Nodes

To allow a TSO/E user to cancel all jobs that originate on nodes you treat as local nodes, do the following:
  1. Define a profile named &RACLNDE in the RACFVARS class, specifying on the ADDMEM operand which nodes are to be treated as local:
    RDEFINE  RACFVARS  &RACLNDE  UACC(NONE)
             ADDMEM(POKMVS1 POKMVS2)
    Note: UACC(NONE) is suggested to protect the &RACLNDE profile itself.
  2. Define a profile in the JESJOBS class as follows:
    RDEFINE  JESJOBS  CANCEL.&RACLNDE *.*  UACC(NONE)
    Note: This example assumes that a SETROPTS GENERIC(classname) was previously issued to turn generics on for this class and that a SETROPTS REFRESH was then done.
  3. Give the appropriate access to the TSO/E user, using the ALTER option of the ACCESS parameter.
    PERMIT  CANCEL.&RACLNDE *.*  CLASS(JESJOBS)
            ID(USER1)  ACCESS(ALTER)
    Note: If there are any other JESJOBS profiles that begin with CANCEL, you may also need to permit the user to access those profiles.
  4. If you have not already done so, activate the JESJOBS and RACFVARS classes:
    SETROPTS CLASSACT(JESJOBS RACFVARS)
  5. Refresh SETROPTS RACLIST processing for the RACFVARS class for the change to take effect:
    SETROPTS  RACLIST(RACFVARS) REFRESH
If, later, you decide that node POKMVS2 should no longer be treated as a local node, do the following:
RALTER RACFVARS &RACLNDE DELMEM(POKMVS2)

SETROPTS RACLIST(RACFVARS) REFRESH

SETROPTS GENERIC(JESJOBS) REFRESH
If, later, you decide that USER2 should also be allowed to cancel local jobs, do the following:
PERMIT  CANCEL.&RACLNDE *.*  CLASS(JESJOBS)
        ID(USER2)  ACCESS(ALTER)

SETROPTS GENERIC(JESJOBS) REFRESH