Define Take Action environment variables using SAF profiles

Edit online

Configure environment variables for Take Action command authorization and access using SAF profiles.

Before you begin

The use of SAF profiles for controlling Take Action command authorization and access is optional. Using SAF profiles for this purpose requires a SAF general resource class named $KOBSEC. If resource class $KOBSEC does not exist, it must be defined. For more information, see Define a SAF general resource class for securing access to OMEGAMON resources.
Note: The OMEGAMON® enhanced 3270 user interface (enhanced 3270UI) and TEMS REST services also use the SAF interface for securing access to resources. For the enhanced 3270UI, the SAF general resource class name is customizable and specified in parameter RTE_SECURITY_CLASS. For TEMS REST services, the class name must also be $KOBSEC.

About this task

The following environment variables specify security settings that are used for Take Action command authorization and access:
  • SOAP_IS_SECURE
  • CMS_VALIDATE
  • KDS_VALIDATE
  • RTE_SECURITY_CLASS

These parameters can be set using SAF profiles, which ensures that the parameter settings are checked and enforced.

Setting the values of any of these variables using SAF profiles is optional. If these variables are set using SAF profiles, any duplicate settings of these variables are ignored.

Perform the following procedure to optionally set any of these variables with a SAF profile.

Procedure

  1. To set the value of one of the supported environment variables with a SAF profile, do the following steps:
    1. Create a profile in the RACF security class $KOBSEC using the following format:
      smfid.stc.environment_variable_name
      Where smfid is the name of the LPAR and stc is the name of the started task.
    2. Within the profile, use the APPLDATA field to specify the value of the environment variable.
  2. If any variable is present in the rHilev.ret_name.RKANPARU(KppENV) member, it can also be overridden by an SAF profile. If the profile is present, the value for the variable will be taken from the profile APPLDATA.