Restricting access to product files
The critical Advanced Archive for DFSMShsm files need adequate protection against deletion and damage.
About this task
The Archive Database, Active Log, Cloud Definition Database (if you intend to archive to and restore from a cloud storage environment), and Archive Database backup files are essential for the proper function of Advanced Archive for DFSMShsm.
Because the archive tape files contain your archived data in a format that is very similar to the format in which the data was stored on the DFSMShsm ML2 tapes, you should provide these files with the same protections that you apply to the DFSMShsm ML2 tapes.Procedure
- Use the appropriate security profiles to limit CREATE, DELETE, and UPDATE access for these critical files to only those users who will be executing the Archive, Restore, and maintenance functions.
-
Verify that you have limited CREATE, DELETE, UPDATE, and READ access to only those users who
require this type of access.
Because the archive tape files could contain data from any file in your data center, restricting Read access to the archive tape files is a necessary precaution.