Setting up the STARTED class

With the STARTED class, you do not need to change code or re-IPL the system in order to add or modify RACF® identities for started procedures. You can modify the security definitions for started procedures dynamically, using the RDEFINE, RALTER, and RLIST commands. See z/OS Security Server RACF Command Language Reference for more information on these commands. In effect, the STARTED class provides a dynamic started procedures table.

To set up the STARTED class, enter these commands:

Example:

SETROPTS GENERIC(STARTED)

RDEFINE STARTED JES2.* UACC(NONE)
   STDATA(USER(JES2) GROUP(STCGROUP) TRUSTED(YES))
RDEFINE STARTED ** UACC(NONE)
   STDATA(USER(=MEMBER) GROUP(STCGROUP) TRACE(YES))

SETROPTS CLASSACT(STARTED) RACLIST(STARTED)
 or, if the STARTED class is already in use:
SETROPTS RACLIST(STARTED) REFRESH

Note: Once you alter the TRUSTED attribute for the STARTED class, you must recycle the started task to pick up the change. This is because the TRUSTED attribute is part of the ACEE which is built when the address space starts up, so you have to recycle the task.