Creating a RACF group for payroll management

The Spiffy payroll managers require different privileges and a different RACF® group ID. The security planners add a RACF group for payroll managers and name it PAYMGRS.

About this task

The security planners associate the payroll managers' primary IDs with the PAYMGRS secondary ID. Next, privileges on the PAYMGR view, the compensation application, and the payroll update application are granted to PAYMGRS. The payroll update application must have the appropriate privileges on the update table.

Example

The following statement grants the SELECT, INSERT, UPDATE, and DELETE privileges on the PAYMGR view to the payroll managers' group ID PAYMGRS:

GRANT SELECT, INSERT, UPDATE, DELETE ON PAYMGR TO PAYMGRS;

The following statement grants the EXECUTE privilege on the compensation application:

GRANT EXECUTE ON PLAN COMPENS TO PAYMGRS;