Define the data set profiles
READ
access for users and ALTER
for system programmers is
sufficient for
RSE API data sets. Replace
the #sysprog
placeholder with valid user IDs or RACF® group names. Also, ask the system programmer who installed and configured the product for
the correct data set names. HUH
is the default high-level qualifier used during installation.
ADDGROUP (HUH) OWNER(IBMUSER) SUPGROUP(SYS1) DATA('IBM Remote System Explorer API – HLQ STUB')
ADDSD 'HUH.*.**' UACC(NONE) DATA('IBM Remote System Explorer API (RSE API)')
-
PERMIT 'HUH.*.**' CLASS(DATASET) ACCESS(READ) ID(*)
PERMIT 'HUH.*.**' CLASS(DATASET) ACCESS(ALTER) ID(#sysprog)
SETROPTS GENERIC(DATASET) REFRESH
Note:
- The sample commands in this publication and in the
HUHRACF
job assume that Enhanced Generic Naming (EGN) is active. When EGN is active, the ** qualifier can be used to represent any number of qualifiers in theDATASET
class. Substitute *.** with * if EGN is not active on your system. For more information about EGN, see Security Server RACF Security Administrator's Guide (SA22-7683).