Requirements for the System Data Engine user ID

Edit online

If you are collecting SMF data from an in-memory resource or log stream, the user ID that is associated with the System Data Engine started task must have authority to read the SMF in-memory resource or log stream. Also, if you are collecting SMF data from a log stream, the user ID must have update access to the RACF® profile MVS.SWITCH.SMF in the OPERCMDS RACF class.

If you are collecting SMF data from the SMF user exit, there are no other requirements for the user ID.

The following information further describes the required authorities:

Authority to read the SMF in-memory resource or log stream

For example, if you are using the Resource Access Control Facility (RACF) as your System Authorization Facility (SAF) product, you must give the System Data Engine user ID read authority to the profile that you set up to secure your SMF in-memory resource or log stream. In the following examples, IFASMF.resource represents the name of the SMF in-memory resource or log stream that is being used to gather SMF records, and userid represents the System Data Engine user ID.

Tip: IFASMF.resource is also described in step 8 of Creating the System Data Engine started task for streaming SMF data.

In-memory resource example


PERMIT IFA.IFASMF.resource CLASS(FACILITY) ACCESS(READ) ID(userid)

Log stream example


PERMIT IFASMF.resource CLASS(LOGSTRM) ACCESS(READ) ID(userid)

Update access to the RACF profile MVS.SWITCH.SMF in the OPERCMDS RACF class (only if you are collecting SMF data from a log stream)

This authority is not required to process data from an SMF in-memory resource.

Update access to the RACF profile MVS.SWITCH.SMF in the OPERCMDS RACF class is required only if you are collecting SMF data from a log stream so that the user ID can run the MVS SWITCH SMF command. The System Data Engine periodically runs the MVS SWITCH SMF command to verify that it is accessing the most up-to-date data from the log stream. To grant the user ID update access to this RACF profile, run the following commands:


PERMIT MVS.SWITCH.SMF CLASS(OPERCMDS) ACCESS(UPDATE) ID(userid) 
SETROPTS RACLIST(OPERCMDS) REFRESH