System considerations

When you choose single-subsystem scope and need to add a new Db2 subsystem or upgrade the RACF access control module to support a new Db2 object type, you must add new RACF classes to the RACF class descriptor table.

Tip: Add the classes to the dynamic class descriptor table so that you don't need to re-IPL your system.

When you choose multiple-subsystem scope, you can dynamically define new RACF resources to protect Db2 objects using existing classes.

If you define new RACF resources to protect Db2 objects in a class that was not active at the time your Db2 subsystem was started, you need to restart the Db2 subsystem to activate the new resources. If the class was active at startup time, then you can dynamically activate the new resources using the TSO SETROPTS RACLIST REFRESH command for the class.