Identifying skill requirements

You can control authorization based on user skills and the tasks that users must perform.

Organizing your team involves incorporating various skill sets and might require you to include people from different disciplines if you work in a large organization. These skills are identified in terms of the roles or job titles of the people who specialize in those skills. For example, a task requiring MVS system skills is referred to as a task for the MVS programmer. If some of your team members have multiple skills, you might require fewer individuals to complete your team.

Your team for planning and implementing the RACF access control module must include the following members:

  • MVS programmer
  • RACF administrator
  • Db2 administrator.
The following table lists the team members, tasks, and required skills for planning and implementing the RACF access control module.
Table 1. Roles, tasks, and skills for the implementation team
Role Tasks Required skills Useful references
MVS programmer
  • Install (customize, assemble, and link edit) the RACF access control module
  • Define the RACF classes for use with Db2
  • TSO skills
  • JCL knowledge
  • Assembler programming
RACF administrator
  • Plan RACF classes for use with Db2
  • Define RACF resources to protect Db2 objects and administrative authorities
  • Activate the RACF classes for Db2
  • RACF administration
  • RACF commands, such as the following:
    • ADDGROUP
    • ADDUSER
    • RALTER
    • RDEFINE
    • PERMIT
    • SETROPTS
  • TSO skills
Db2 administrator
  • Plan the Db2 objects and administrative authorities to protect
  • Restart the Db2 subsystem
  • Db2 basic operations
  • Db2 commands and authorization requirements
  • System and basic database administration