IBM Db2 for z/OS Server Configurations

Edit online
On workstations where IBM® AD Build Client is installed, Data Server Client V11.1 that contains IBM Data Server Provider for .NET must be installed and licensed. The mentioned package is part of Db2® Connect™ V11.1 product.
Note: .NET framework 4.5.1 or higher is prerequisite for IBM AD Build Client.
To license the .NET provider, click Start, select Run, type cmd to open the command window and run the following command: 
"<Installation Path for IBM Data Server Client>\BIN\db2licm.exe" -a <path to license file>\<name of license file>
Important: The name of the license file is given by the Db2 Connect™ license type. The following Db2 Connect™ products are available, together with the corresponding license's name:
  • DB2® Connect Personal Edition - db2conpe.lic
  • DB2 Connect Application Server Edition - db2consv_as.lic
  • DB2 Connect Enterprise Edition - db2consv_ee.lic
  • DB2 Connect Unlimited Edition for System i® - db2consv_is.lic
  • DB2 Connect Unlimited Edition for System z® - db2consv_zs.lic
Example when DB2 Connect Enterprise Edition is used:
"C:\Program Files\IBM\SQLLIB\BIN\db2licm.exe" -a C:\Apps\DB2_CEE_QS_Activation_11.1\consv_ee\db2\license\db2consv_ee.lic
In case that IBM AD Build Client is intended to be used by a standard user, with no administration privileges, make sure that during Db2 Connect V11.1 installation process the Enable operating system security check box is selected.
Note: If you selected the Enable operating system security check box, you now have to add users to the DB2ADMNS or the DB2USERS groups for users that need to run IBM AD Build Client. For more information, see Adding your user ID to the DB2ADMNS and DB2USERS user groups.

Some packages must be bound on the server. The bound files are listed in the ddcsmvs.lst file for IBM Z, for example, C:\Program Files\IBM\SQLLIB_01\bnd\ddcsmvs.lst.

User permissions

In IBM AD application, a z/OS® user account (Authentication ID) is used to work with the Db2 for z/OS repository. The user account must have the privilege to execute sql clauses and must have permissions to perform the following actions:

  • Use the storage group that is specified when configuring the Db2 z/OS connection in IBM AD Configuration Server.
    Note: Make sure that the storage group is initially created.
  • Use the SYSDEFLT default storage group.
  • Use the default buffer pools.
  • Create and use databases, tables, table spaces, indexes, constraints, views, triggers, stored procedures, and user-defined functions.
  • Run the SELECT command over system tables (SYSIBM.SYS*).
  • Have full control over the databases that are created by the user account.
  • GRANT BINDADD, BINDAGENT, CREATEDBA, CREATESG, DISPLAY
  • GRANT ALTERIN, CREATEIN, DROPIN ON SCHEMA *
  • GRANT CREATE IN COLLECTION *
  • GRANT SELECT ON TABLE SYSIBM.SYSROUTINES_SRC
  • GRANT SELECT ON TABLE SYSIBM.SYSROUTINES_OPTS
Important: All permissions must be granted directly to the user account (Authentication ID).