Authorizing DTCD and DTCI transactions to delete or deactivate debug profiles

This topic describes the steps you must take to authorize the DTCD and DTCI transactions to delete or deactivate debug profiles stored in a VSAM data set.

The EQADTOOL.DTCDDELETEALL resource controls DTCD authorizations.

The EQADTOOL.DTCIINACTALL resource controls DTCI authorizations.

To authorize DTCD and DTCI users so they can delete or deactivate debug profiles stored in a VSAM data set, do the following steps:

Establish profiles in the FACILITY class by entering the following RDEFINE commands:

RDEFINE FACILITY EQADTOOL.DTCDDELETEALL UACC(NONE)
RDEFINE FACILITY EQADTOOL.DTCIINACTALL UACC(NONE)

Verify that generic profile checking is in effect for the class FACILITY by entering the following command:
```
SETROPTS GENERIC(FACILITY)
```
Give a user permission to delete or deactivate debug profiles stored in a VSAM data set by entering the following commands, where DUSER1 is the name of a RACF-defined user or group profile:
```
PERMIT EQADTOOL.DTCDDELETEALL CLASS(FACILITY) ID(DUSER1) ACCESS(UPDATE)
PERMIT EQADTOOL.DTCIINACTALL CLASS(FACILITY) ID(DUSER1) ACCESS(UPDATE)
```
Instead of connecting individual users, the security administrator can specify DUSER1 to be a RACF® group profile and then connect authorized users to the group.
If the FACILITY class is not active, activate the class by entering the following SETROPTS command:
```
SETROPTS CLASSACT(FACILITY)
```
Enter the SETROPTS LIST command to verify that FACILITY class is active.
Refresh the FACILITY class by entering the following SETROPTS RACLIST command:
```
SETROPTS RACLIST(FACILITY) REFRESH
```