Authorizing access to the Configuration Tool files

The Z Common Data Provider must have read access to the z/OS® UNIX files that are generated by the Configuration Tool.

About this task

When you create a policy in the Configuration Tool, various policy files are created under the Configuration Tool working directory with the permission bit of 660. For more information, see Setting up a working directory for the Configuration Tool.

Procedure

If you need the Z Common Data Provider started tasks to access the files directly from the Configuration Tool working directory, follow the instructions below:

Display the permissions on the Configuration Tool working directory by using the ls command.
```
ls -l /etc/cdpConfig
```
Sample response:
```
drwxrwx---   4 KZHAN    IZUADMIN     8192 Aug 25 14:52 HBOCDEUI
```
In this example, IZUADMIN is the group that is associated with the directory. Apart from the owner, any user ID that requires permission to the directory must be a member of this group.
Display groups that are associated with the Z Common Data Provider started tasks user ID (HBOLGF by default) by using the id command.
```
id HBOLGF
```
If the group of the Configuration Tool working directory is not in the list of the groups from the above command, ask your security administrator to connect the user ID that is associated with the Z Common Data Provider started tasks to that group. The following is an example RACF® command.
```
CONNECT (HBOLGF) GROUP(IZUADMIN)
```
Verify that the user ID that is associated with the Z Common Data Provider started tasks is in the group of the Configuration Tool working directory.
```
id HBOLGF
```