Authorizing users to refresh WLM environments

When you prepare a new version of a stored procedure in a WLM application environment, you need to activate the updated stored procedure by refreshing the application environment.

About this task

You can refresh the WLM environment by issuing a VARY REFRESH command at a z/OS® command line. Alternatively, you can execute the WLM_REFRESH stored procedure, which is supplied by Db2 and executes the VARY REFRESH command. This stored procedure is useful when users need to refresh the WLM environment but are not authorized to issue operator commands.

Procedure

To authorize users to use the WLM_REFRESH stored procedure:

Grant access to the RACF® resource profile for each application environment.
Db2 checks the resource authorization by using the DSNR RACF class as follows:
- In a Db2 data sharing environment, Db2 checks the following RACF resource name, where db2-groupname is the name of the Db2 data sharing group:
```
db2-groupname.WLMENV.wlm-environment
```
- In a non-data sharing environment, Db2 checks the following RACF resource name, where db2-ssid is the Db2 subsystem name:
```
db2-ssid.WLMENV.wlm-environment
```
For example, assume that you want to authorize RACF group DEVL7083 to access the WLM_REFRESH RACF resource profile for application environment DB9AWLM on subsystem DB9A. To authorize the RACF group in this way, you can issue this command:
```
RDEFINE DSNR (DB9A.WLM_REFRESH.DB9AWLM)
PE DB9A.WLM_REFRESH.DB9AWLM +
CLASS(DSNR) ID(DEVL7083) ACCESS(READ)
END
```
Grant the EXECUTE privilege on the stored procedure to users or groups who need to refresh the environment.
For example, you can issue the following GRANT statement to authorize the RACF group DEVL7083 to execute the WLM_REFRESH stored procedure on application environment DB9AWLM:
```
GRANT EXECUTE ON PROCEDURE SYSPROC.WLM_REFRESH TO DEVL7083;
```
You need to grant the EXECUTE privilege only once because you supply the application environment name as a variable when you execute the stored procedure.