Defining command profiles

To define the resource profile for SETPROG, the RACF® administrator can take the following steps:

  1. To create a profile for the SETPROG command, issue RDEFINE:
    RDEFINE OPERCMDS MVS.SETPROG UACC(NONE)
  2. To permit the userid for the user logging on to the console (in this example user OPER1) to use the command in the OPERCMDS class, issue the following:
    PERMIT MVS.SETPROG CLASS(OPERCMDS) ID(OPER1) ACCESS(UPDATE)

    OPER1 must be the name of a RACF-defined user or group profile.

    Note: Instead of specifying individual userids, you can specify the name of a RACF group profile and connect authorized users to the group. See Defining RACF profiles.
  3. If the OPERCMDS class is not already active, issue the SETROPTS command as follows:
    SETROPTS CLASSACT(OPERCMDS)

    (To ensure that the OPERCMDS class is active, you can issue the SETROPTS LIST command.)

  4. To refresh the OPERCMDS resource class, issue SETROPTS RACLIST:
    SETROPTS RACLIST(OPERCMDS) REFRESH
For the SET PROG command, you follow the same steps as outlined for SETPROG but use the following RACF profile name:
MVS.SET.PROG

When you have given access to users of SETPROG and SET PROG, you can further control the use of the command.