Authorizing users to access DFSMShsm resources

Storage administrators who are responsible for migrated data sets and backup versions can be authorized to process catalogs without recalling the migrated data sets and backup versions.

In processing units with both DFSMShsm and RACF® active, issuing the UNCATALOG, RECATALOG, or DELETE/NOSCRATCH command against a migrated data set causes DFSMShsm to recall the data set before the operation is performed unless you take action.

To allow certain authorized users to perform these operations on migrated data sets without recalling them, perform the following steps.

Define a RACF catalog maintenance group named ARCCATGP.
Example: ADDGROUP (ARCCATGP)
Connect the desired users to that group.
If you specify . . . Then . . .
CONNECT (userid1,. . .,useridn ) GROUP(ARCCATGP) AUTHORITY(USE) Each user (userid1,. . .,useridn) is authorized to bypass automatic recall for catalog operations.

Only when such a user is logged on under group ARCCATGP does DFSMShsm bypass the automatic recall for UNCATALOG, RECATALOG, and DELETE/NOSCRATCH requests for migrated data sets.

Example: The following LOGON command demonstrates starting a TSO session under ARCCATGP:

LOGON userid | password GROUP(ARCCATGP)

Figure 1 demonstrates a batch job running under ARCCATGP:

Figure 1. Example of Batch Job Running under ARCCATGP

  //JOBNAME  JOB (accounting information),'USERNAME',
  //         USER=userid,GROUP=ARCCATGP,PASSWORD=password
  //         EXEC PGM=….

Note: Automatic recall of a data set being deleted is bypassed provided that DFSMShsm receives the DELETE command before any other command against that data set. If another component invokes DFSMShsm prior to the DELETE command, an automatic recall occurs. Example: Automatic recall occurs when issuing a DELETE on a migrated data set using TSO option 3.2. A locate is done, which invokes DFSMShsm to locate the data set prior to the DELETE command.

Start of change If you use DFSMShsm to back up and recover RLS user catalogs, ensure that the DFSMShsm authorized user identification (UID) has been granted READ access to the IGG.CATLOCK FACILITY class profile and ALTER access to the user catalogs. DFSMShsm invokes DFSMSdss to back up and recover RLS ICF user catalogs. During recover of an RLS user catalog, DFSMShsm specifies the BCSRECOVER(LOCK) parameter, and DFSMSdss will perform LOCK and UNLOCK on behalf of DFSMShsm when the user catalog is preallocated. The RECOVER command will fail if DFSMShsm UID has insufficient authority, or if the IGG.CATLOCK FACILITY class profile has not been defined. End of change

Related reading