Defining resources to RACF

Edit online

The Data Virtualization Manager server protects its resources using the Resource Access Control Facility (RACF) class added to the RACF class descriptor table.

Procedure

Use the following JCL as a model for defining a new RACF class to the RACF class descriptor table for RAVZ.

//STEP1 EXEC ASMHCL
//C.SYSLIB DD DSN=SYS1.MODGEN,DISP=SHR
//C.SYSIN DD *
 RAVZ ICHERCDE CLASS=RAVZ,
       ID=128,
       MAXLNTH=144,
       FIRST=ALPHANUM,
       OTHER=ANY,
       POSIT=25,
       OPER=NO
     ICHERCDE
/*
//L.SYSLMOD DD DSN=SYS1.LINKLIB,DISP=SHR
//L.SYSIN DD *
     INCLUDE SYSLMOD(ICHRRCDE)
       ORDER RAVZ
       ORDER *** Previous user-defined classes ***
       ORDER *** Previous user-defined classes ***
       ORDER ICHRRCDE
     NAME ICHRRCDE(R)
/*

Restart the Data Virtualization Manager server so that RACF recognizes the new class.

Perform an IPL to change the RACF class descriptor table. This procedure is necessary for RACF to recognize the new class.
Define all RACF resource types to class RAVZ with the following command:
```
RDEFINE RAVZ CONTROLBLOCKS UACC(NONE)
```
Repeat the RDEFINE command for each RACF resource type.
Provide access to the resource according to the following example:
```
PERMIT CONTROLBLOCKS CLASS(RAVZ) ID(USERID) ACCESS(READ)
```
Where USERID is the ID of the user to whom you want to grant READ permissions access.
If you do not want the FACILITY class to be used, the hlq.SAVZCNTL(AVZRADF2) member can be used as a sample for how to define the RACF class descriptor and router table.

You can edit and submit the job in hlq.SAVZCNTL(AVZRARES) to define and add permissions for the resource required by your site.
Activate the class to RACF with the following command:
```
SETROPTS CLASSACT(RAVZ)
```

What to do next

These members must be updated every time a new security resource name such as ATHZOOM or USERS is added.