Granting managers the SELECT privilege with RACF security

To provide the SELECT privilege on the DEPTMGR view to managers, you need to permit RACF read access to a profile that defines the SELECT privilege.

Procedure

  1. Define a discrete RACF profile for the SELECT privilege on the employee view for managers, DEPTMGR, in the class for views, MDSNTB, with a default access of no access.
  2. Permit access to the RACF profile to individual managers.
  3. Refresh the profiles in the MDSNTB class.

Example

To define the RACF profile for the SELECT privilege on the DEPTMGR view in subsystem DB2A, grant access to the MGRS group, and refresh the profiles, use the following statements: 
RDEFINE MDSNTB DB2A.SYSADM.DEPTMGR.SELECT UACC(NONE)
PERMIT DB2A.SYSADM.DEPTMGR.SELECT CLASS(MDSNTB) ID(MGRS) ACC(READ)
SETROPTS RACLIST(MDSNTB) REFRESH