Customizing the PARMLIB command

The PARMLIB command lets you list and update TSO/E specifications that are in effect on the system. Those TSO/E specifications include tables of authorized commands and programs, and default values for some TSO/E commands.

The CHECK function of the PARMLIB command lets you check the syntax of any IKJTSOxx member of SYS1.PARMLIB, including active members.

Before people at your installation can use the PARMLIB command, you must add PARMLIB to the table of authorized commands. Specifying authorized commands/programs, and commands not supported in the background describes how to maintain and update the table.

You should also limit individual users from using the PARMLIB command. You can limit users in one of the following ways:

Using PARMLIB exit routine IKJPRMX1. When a user issues PARMLIB, IKJPRMX1 can check the user ID and issue a return code to let the user continue, to cancel the PARMLIB command, or to invoke authority checking through RACF®.
Using RACF. You can use the RACF RDEFINE command to define PARMLIB as a RACF resource belonging to the TSOAUTH RACF class. Then give selected users access to the PARMLIB resource using the RACF PERMIT command. Users who will use the CHECK or LIST operands will require READ access to the TSOAUTH-class PARMLIB profile; in order to use the UPDATE operand, UPDATE access to the profile will be needed. Note that users do not require a TSO segment to gain access to the PARMLIB profile in the TSOAUTH class.

In addition to controlling access to the PARMLIB command, you can customize the PARMLIB command by writing exits to tailor or monitor its processing. TSO/E provides two exits for the PARMLIB command:

Initialization (IKJPRMX1)
Termination (IKJPRMX2)

Using the PARMLIB exits, you can:

Verify that the user has authority to issue the PARMLIB command.
Provide a new command buffer to change the operands a user specifies on the command or restrict the use of certain operands. For example, you can correct a user's errors or restrict users from using specific operands.