Starting Debug Manager as a user job
When not run as a started task, Debug Manager queries your security product for explicit permission to start.
Security profile | Required access |
---|---|
EQADTOOL.START.BATCH.jobname.port |
READ |
Name | Substitution |
---|---|
jobname | Name of the job |
port | port number (the port used for internal communication) |
The security class where this profile resides can be specified with SAFCLASS
command line parameter, and is defined as FACILITY
by default. Use
SAFCLASS=CLASS_NAME
command line option to modify the default name. When the
profile is not defined or the class is not active, permission is denied and batch startup fails.
Use the following sample RACF commands to allow user ID
IBMUSER
to start
Debug Manager in batch with job name
EQADBM
and port 5336
:RDEFINE FACILITY EQADTOOL.START.BATCH.EQADBM.5336 UACC(NONE) DATA('start DBM in batch')
PERMIT EQADTOOL.START.BATCH.EQADBM.5336 CLASS(FACILITY) ACCESS(READ) ID(IBMUSER)
SETROPTS RACLIST(FACILITY) REFRESH