Preparing to use Cloud Provisioning

This chapter describes how to quickly get started with IBM Cloud Provisioning and Management for z/OS, by using supplied jobs to set up a secure default domain and tenant. Included are descriptions of the key concepts and terms, and the resource profiles that must be defined. The examples in this chapter follow the default security setup for IBM Cloud Provisioning and Management for z/OS. Your installation can choose alternative values for the settings that are shown here.

IBM strongly recommends the use of groups, whenever possible, for ease of security administration. This chapter, the IZUPRSEC sample RACF setup job, and the automatic security management in IBM Cloud Provisioning and Management for z/OS all assume that you will use groups for security administration.

After you perform the initial security setup, you will not need to repeat the steps in this chapter. Instead, the Cloud Provisioning tasks will perform dynamic updates to your security environment, with one exception: The landlord group is maintained manually by your security administrator.

The instructions in this chapter assume that your installation shares its security database across the participating systems in the sysplex. If you use more than one security database, your security administrator must duplicate the Cloud Provisioning authorizations in each security database.