z/OS DFSMSrmm Implementation and Customization Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Step 3: Define a RACF FACILITY class entity to check authorization

z/OS DFSMSrmm Implementation and Customization Guide
SC23-6874-00

Define a RACF FACILITY class entity to protect volumes. DFSMSrmm checks that the user trying to use a duplicate or undefined volume is authorized to request that DFSMSrmm ignore the volume. The RACF FACILITY class entities are:
  • STGADMIN.EDG.IGNORE.TAPE.volser
  • STGADMIN.EDG.IGNORE.TAPE.RMM.volser
  • STGADMIN.EDG.IGNORE.TAPE.NORMM.volser

Only users with the correct authorization to the entities can request that DFSMSrmm ignore volumes.

Define multiple resources, as required, for individual volumes or groups of volumes by using RACF generic resource names. GLOBALAUDIT(SUCCESS) ensures that RACF maintains an audit trail of all successful uses of this facility.

RDEFINE FACILITY STGADMIN.EDG.IGNORE.TAPE.X* UACC(NONE)
RALTER FACILITY STGADMIN.EDG.IGNORE.TAPE.X* GLOBALAUDIT(SUCCESS)
RDEFINE FACILITY STGADMIN.EDG.IGNORE.TAPE.810* UACC(NONE)
RALTER FACILITY STGADMIN.EDG.IGNORE.TAPE.810* GLOBALAUDIT(SUCCESS)
RDEFINE FACILITY STGADMIN.EDG.IGNORE.TAPE.RMM.Y* UACC(NONE)
RALTER FACILITY STGADMIN.EDG.IGNORE.TAPE.RMM.Y* GLOBALAUDIT(SUCCESS)
RDEFINE FACILITY STGADMIN.EDG.IGNORE.TAPE.RMM.710* UACC(NONE)
RALTER FACILITY STGADMIN.EDG.IGNORE.TAPE.RMM.710* GLOBALAUDIT(SUCCESS)
RDEFINE FACILITY STGADMIN.EDG.IGNORE.TAPE.NORMM.Z* UACC(NONE)
RALTER FACILITY STGADMIN.EDG.IGNORE.TAPE.NORMM.Z* GLOBALAUDIT(SUCCESS)
RDEFINE FACILITY STGADMIN.EDG.IGNORE.TAPE.NORMM.910* UACC(NONE)
RALTER FACILITY STGADMIN.EDG.IGNORE.TAPE.NORMM.910* GLOBALAUDIT(SUCCESS)

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014