Values on the Create Domain window
Domain Details
- Domain name
- Name of the domain. It can be up to 32 characters, which can include alphanumeric characters and
these special characters:
- @
- $
- _ (not valid for the first or last character)
- - (not valid for the first or last character)
- Description
- Description of the domain.
Administrators and Approvers
- Domain administrator
- Selected domain administrators
- Define the administrators for the domain, which are shown in the Selected domain administrators
field.
To add a user ID to the list of selected administrators for the domain, type the user ID in the Domain administrator field, then click Add. A group is not allowed.
To Remove a user ID from the list of selected domain administrators, click the user ID in the list, then click Remove.
- Network administrator
- Selected Network administrators
- Define the administrators for the Network, which are shown in the Selected network
administrators field.
To add a user ID to the list of selected administrators for the network, type the user ID in the Network administrator field, then click Add. A group is not allowed. A network administrator must be specified if a network resource pool is to be created.
To Remove a user ID from the list of selected network administrators, click the user ID in the list, then click Remove.
- Workload administrator
- Selected Workload administrators
- Define the workload administrators, which are shown in the
Selected workload administrators field.
To add a user ID to the list of selected workload administrators, type the user ID in the Workload administrator field, then click Add. A group is not allowed. A workload administrator must be specified if a WLM resource pool is to be created.
To Remove a user ID from the list of selected workload administrators, click the user ID in the list, then click Remove.
To enable metering and capping for a tenant, you must specify a workload administrator for the associated domain.
- Approvers for templates
- Selected approvers for templates
- Define the approvers for templates, which are shown in the Selected approvers for templates
field.
To add a user ID to the list of selected approvers for templates, type the user ID in the Approvers for templates field, then click Add.
To Remove a user ID from the list of selected approvers for templates, click the user ID in the list, then click Remove.
These approvers apply to all templates that are associated with the domain while the template is in any of the draft states.
Systems
- Available Systems
- Systems for this domain
- Define the systems to include in the domain. The Available systems table
shows the systems that are available to be included, in the form
sysplex-name.system-name. LOCAL indicates the system that you
are logged on to. The available systems are the group of systems named IYUCLOUD.
If there are no systems to select, update the group of systems named IYUCLOUD with the Systems task of the z/OSMF Settings category. Then, on the Create Domain page, click Refresh to update the table of systems.
Use Add or Remove to build the set of systems for the domain.
Security
- Security definition
- Type of security definition:
- Automatic
- z/OSMF uses a REXX exec to perform security setup dynamically.
The security definition for the default domain is always Automatic.
- Manual
- Security setup must be performed manually. This occurs when no value for a cloud
security administrator was specified in parmlib, with option CLOUD_SEC_ADMIN.
To see the relevant SAF resources, use the View action for the domain.
For more information, see Preparing to use cloud provisioning.
- Security administrator
- The user ID of the security
administrator, specified in parmlib, with option CLOUD_SEC_ADMIN.
For manual security, supply the user ID of the security administrator who is to be notified of required security updates. A group is not allowed.
The security administrator ID must be a member of the z/OSMF security administrator group (IZUSECAD, by default).
- Security workflow disposition
Select Delete successful workflows on completion to cause the workflow that is used for security to be deleted automatically after it completes successfully. The default is to delete successful workflows after they complete.
If you do not specify that the workflows should be deleted automatically, you can manually delete workflows from the workflows table in the Workflows task.
- Security jobs disposition
Select Delete jobs on completion to cause the jobs that are dynamically submitted for security to be deleted automatically after they complete. The default is to keep jobs after they complete.
If you do not specify that the jobs should be deleted automatically, you can manually delete the jobs.
- Specify customized security JCL JOB statement
- Select this to supply JOB statement JCL for jobs that manage security definitions for cloud resources such as domains and templates. These jobs are submitted dynamically when the cloud resources are created, modified, or deleted.
- JOB statement JCL
- Supply JOB statement JCL to be used in jobs that manage security definitions for cloud resources
such as domains and templates. z/OSMF creates and submits the jobs for you when cloud resources are
created, modified, or deleted.Job names:
- Can be up to 8 characters, consisting of A-Z, a-z, 0-9, and these special characters: # $ @
- Must start with an alphabetic character or one of these special characters: # $ @
- Can use workflow variables, which you specify as follows:
- ${_workflow-workflowOwnerUpper}
- Workflow owner
- ${_step-stepOwnerUpper}
- Workflow step owner
Account information can be a maximum of 143 characters, including commas, quotation marks, and parentheses. When a subparameter contains characters other than alphanumeric characters or #, $, @, it must be enclosed in apostrophes.
Separate subparameters with commas and enclose them in parentheses, for example, (5438,GROUP6) or '5438,GROUOP6'. When enclosed in apostrophes, additional apostrophes must be added in pairs, for example, 'DEPT''58'.
Click Restore Default to discard any changes you have made and restore the default JCL.