z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Using RACROUTE REQUEST=LIST,GLOBAL=YES support

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

The RACROUTE REQUEST=LIST,GLOBAL=YES option creates in-storage profiles in a data space rather than in private storage. It allows multiple address spaces to share the same set of RACLISTed profiles. Each additional application that issues RACROUTE REQUEST=LIST,GLOBAL=YES for the same class can access the data space already built. Profiles that are globally RACLISTed for a class with RACROUTE REQUEST=LIST,GLOBAL=YES can be refreshed simultaneously for all users by SETROPTS RACLIST(classname) REFRESH. The refresh occurs without requiring the applications to suspend work.

Classes that are RACLISTed solely by this means are listed in a line in the output of the SETR LIST command, with the following format:
GLOBAL=YES RACLIST ONLY =

After all applications have given up their access to the RACLIST data space by issuing RACROUTE REQUEST=LIST,ENVIR=DELETE, you can delete the data space by issuing SETROPTS NORACLIST(classname). Remember that the SETROPTS RACLIST REFRESH and SETROPTS NORACLIST commands process both the class specified by the command and all valid classes sharing the same POSIT value as the specified class. Additionally, if the system is enabled for sysplex communication, the command is propagated to the other members of the sysplex data sharing group.

For a detailed comparison of the RACROUTE and SETROPTS processes, see z/OS Security Server RACF Diagnosis Guide.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014