ISFPARMS vs RACF profiles
The table in this topic cross-references the ISFPARMS parameters that have an equivalent RACF® class/profile.
| ISFPARM | RACF Class | Access | RACF Profile | Description |
|---|---|---|---|---|
| AUTH=ABEND | SDSF | READ | ISFCMD.MAINT.ABEND | Authority to issue the ABEND command. |
| AUTH=ACTION | SDSF | READ | ISFCMD.FILTER.ACTION | Authority to issue the ACTION command. |
| AUTH=ALL | SDSF | READ | ISFCMD.** | Authority to issue any SDSF command. |
| AUTH=ALLOPER | SDSF | READ | ISFCMD.DSP.* ISFCMD.ODSP.* ISFCMD.FILTER.ACTION ISFCMD.FILTER.DEST ISFCMD.FILTER.FINDLIM ISFCMD.FILTER.OWNER ISFCMD.FILTER.PREFIX ISFCMD.FILTER.RSYS ISFCMD.FILTER.SYSID ISFCMD.FILTER.SYSNAME |
Authority to issue any SDSF operator command. |
| AUTH=ALLUSER | SDSF | READ | ISFCMD.DSP.* | Authority to issue any SDSF end user command. |
| AUTH=APF | SDSF | READ | ISFCMD.ODSP.APF.system | Authority to issue the APF command. |
| AUTH=AS | SDSF | READ | ISFCMD.ODSP.AS.system | Authority to issue the AS command. |
| AUTH=CFC | SDSF | READ | ISFCMD.ODSP.COUPLE.system | Authority to issue the CFC command. |
| AUTH=CFS | SDSF | READ | ISFCMD.ODSP.CFSTRUCT.system | Authority to issue the CFS command. |
| AUTH=CK | SDSF | READ | ISFCMD.ODSP.HCHECKER.system | Authority to issue the CK command. |
| AUTH=CSR | SDSF | READ | ISFCMD.ODSP.CSR.system | Authority to issue the CSR command. |
| AUTH=DA | SDSF | READ | ISFCMD.DSP.ACTIVE.jesx | Authority to issue the DA command. |
| AUTH=DEST | SDSF | READ | ISFCMD.FILTER.DEST | Authority to issue the DEST command. |
| AUTH=DEST | SDSF | READ | ISFOPER.ANYDEST.jesx | Equivalent to DEST for the AUTH parameter, with no DEST parameter. Users authorized to the DEST command and to this resource can issue the DEST command using any destination name. |
| AUTH=DEST | SDSF | READ | ISFAUTH.DEST.destname | Equivalent to DEST for the AUTH parameter, with a DEST parameter. In the SAF resource, destname is a destination name specified through the DEST parameter. |
| AUTH=DEV | SDSF | READ | ISFCMD.ODSP.DEVACT.system | Authority to issue the DEV command. |
| AUTH=DYNX | SDSF | READ | ISFCMD.ODSP.DYNX.system | Authority to issue the DYNX command. |
| AUTH=EMCS | SDSF | READ | ISFCMD.ODSP.EMCS.system | Authority to issue the EMCS command. |
| AUTH=ENC | SDSF | READ | ISFCMD.ODSP.ENCLAVE.system | Authority to issue the ENC command. |
| AUTH=ENQ | SDSF | READ | ISFCMD.ODSP.ENQUEUE.system | Authority to issue the ENQ command. |
| AUTH=FINDLIM | SDSF | READ | ISFCMD.FILTER.FINDLIM | Authority to issue the FINDLIM command. |
| AUTH=FS | SDSF | READ | ISFCMD.ODSP.FILESYS.system | Authority to issue the FS command. |
| AUTH=GT | SDSF | READ | ISFCMD.ODSP.TRACKER.system | Authority to issue the GT command. |
| AUTH=H | SDSF | READ | ISFCMD.DSP.HELD.jesx | Authority to issue the H command. |
| AUTH=I | SDSF | READ | ISFCMD.DSP.INPUT.jesx | Authority to issue the I command. |
| AUTH=INIT | SDSF | READ | ISFCMD.ODSP.INITIATOR.jesx | Authority to issue the INIT command. |
| AUTH=INPUT | SDSF | READ | ISFCMD.FILTER.INPUT | Authority to issue the INPUT command. |
| AUTH=JC | SDSF | READ | ISFCMD.ODSP.JOBCLASS.jesx | Authority to issue the JC command. |
| AUTH=JES | SDSF | READ | ISFCMD.ODSP.JES.system | Authority to issue the JES command. |
| AUTH=JRI | SDSF | READ | ISFCMD.ODSP.JESINFO.jesx | Authority to issue the JRI command. |
| AUTH=JRJ | SDSF | READ | ISFCMD.ODSP.JESINFO.jesx | Authority to issue the JRJ command. |
| AUTH=JG | SDSF | READ | ISFCMD.DSP.GROUP.jesx | Authority to issue the JG command. |
| AUTH=JO | SDSF | READ | ISFCMD.ODSP.JOB0.jesx | Authority to issue the JO command. |
| AUTH=LI | SDSF | READ | ISFCMD.ODSP.LINE.jesx | Authority to issue the LI command. |
| AUTH=LNK | SDSF | READ | ISFCMD.ODSP.LNK.system | Authority to issue the LNK command. |
| AUTH=LOG | SDSF | READ | ISFCMD.ODSP.SYSLOG.jesx | Authority to issue the LOG command. |
| AUTH=LPA | SDSF | READ | ISFCMD.ODSP.LPA.system | Authority to issue the LPA command. |
| AUTH=LPD | SDSF | READ | ISFCMD.ODSP.LPD.system | Authority to issue the LPD command. |
| AUTH=MAS | SDSF | READ | ISFCMD.ODSP.MAS.jesx | Authority to issue the MAS command. |
| AUTH=NA | SDSF | READ | ISFCMD.ODSP.NETACT.system | Authority to issue the NA command. |
| AUTH=NC | SDSF | READ | ISFCMD.ODSP.NC.jesx | Authority to issue the NC command. |
| AUTH=NO | SDSF | READ | ISFCMD.ODSP.NODE.jesx | Authority to issue the NO command. |
| AUTH=NS | SDSF | READ | ISFCMD.ODSP.NS.jesx | Authority to issue the NS command. |
| AUTH=O | SDSF | READ | ISFCMD.DSP.OUTPUT.jesx | Authority to issue the O command. |
| AUTH=OMVS | SDSF | READ | ISFCMD.ODSP.OMVS.system | Authority to issue the OMVS command. |
| AUTH=PAG | SDSF | READ | ISFCMD.ODSP.PAGE.system | Authority to issue the PAG command. |
| AUTH=PARM | SDSF | READ | ISFCMD.ODSP.PARMLIB.system | Authority to issue the PARM command. |
| AUTH=PR | SDSF | READ | ISFCMD.ODSP.PRINTER.jesx | Authority to issue the PR command. |
| AUTH=PREF | SDSF | READ | ISFCMD.FILTER.PREFIX | Authority to issue the PREFIX command. |
| AUTH=PROC | SDSF | READ | ISFCMD.ODSP.PROCLIB.jesx | Authority to issue the PROC command. |
| AUTH=PS | SDSF | READ | ISFCMD.ODSP.PROCESS.system | Authority to issue the PS command. |
| AUTH=PUN | SDSF | READ | ISFCMD.ODSP.PUNCH.jesx | Authority to issue the PUN command. |
| AUTH=RDR | SDSF | READ | ISFCMD.ODSP.READER.jesx | Authority to issue the RDR command. |
| AUTH=RES | SDSF | READ | ISFCMD.ODSP.RESOURCE.system | Authority to issue the RES command. |
| AUTH=REPC | SDSF | READ | ISFCMD.ODSP.REPC.system | Authority to issue the REPC command. |
| AUTH=RGRP | SDSF | READ | ISFCMD.ODSP.RGRP.system | Authority to issue the RGRP command. |
| AUTH=RM | SDSF | READ | ISFCMD.ODSP.RESMON.jesx | Authority to issue the RM command. |
| AUTH=RMA | SDSF | READ | ISFCMD.ODSP.RMA.system | Authority to issue the RMA command. |
| AUTH=RSYS | SDSF | READ | ISFCMD.FILTER.RSYS | Authority to issue the RSYS command. |
| AUTH=SE | SDSF | READ | ISFCMD.DSP.SCHENV.system | Authority to issue the SE command. |
| AUTH=SMSG | SDSF | READ | ISFCMD.ODSP.STORGRP.system | Authority to issue the SMSG command. |
| AUTH=SMSV | SDSF | READ | ISFCMD.ODSP.SMSVOL.system | Authority to issue the SMSV command. |
| AUTH=SO | SDSF | READ | ISFCMD.ODSP.SO.jesx | Authority to issue the SO command. |
| AUTH=SP | SDSF | READ | ISFCMD.ODSP.SPOOL.jesx | Authority to issue the SP command. |
| AUTH=SR | SDSF | READ | ISFCMD.ODSP.SR.system | Authority to issue the SR command. |
| AUTH=SRVC | SDSF | READ | ISFCMD.ODSP.SRVC.system | Authority to issue the SRVC command. |
| AUTH=SSI | SDSF | READ | ISFCMD.ODSP.SUBSYS.system | Authority to issue the SSI command. |
| AUTH=ST | SDSF | READ | ISFCMD.DSP.STATUS.jesx | Authority to issue the ST command. |
| AUTH=SYS | SDSF | READ | ISFCMD.ODSP.SYSTEM.system | Authority to issue the SYS command. |
| AUTH=SYSID | SDSF | READ | ISFCMD.FILTER.SYSID | Authority to issue the SYSID command. |
| AUTH=SYSNAME | SDSF | READ | ISFCMD.FILTER.SYSNAME | Authority to issue the SYSNAME command. |
| AUTH=TRACE | SDSF | READ | ISFCMD.MAINT.TRACE | Authority to issue the TRACE command. |
| AUTH=ULOG | SDSF | READ | ISFCMD.ODSP.ULOG.jesx | Authority to issue the ULOG command. |
| AUTH=VMAP | SDSF | READ | ISFCMD.ODSP.VIRTSTOR.system | Authority to issue the VMAP command. |
| AUTH=WKLD | SDSF | READ | ISFCMD.ODSP.WKLD.system | Authority to issue the WKLD command. |
| AUTH=WLM | SDSF | READ | ISFCMD.ODSP.WLM.system | Authority to issue the WLM command. |
| AUTH=XCFM | SDSF | READ | ISFCMD.ODSP.CFMEMBER.system | Authority to issue the XCFM command. |
| CMDAUTH=DEST | SDSF | READ | ISFOPER.DEST.jesx | SDSF does further checking for authority to jobs and output based on destination (destination operator authority). |
| CMDAUTH=DEST | SDSF | ALTER | ISFAUTH.DEST.destname | Used with the above ISFOPER.DEST.jesx resource, is equivalent to DEST for CMDAUTH with a DEST parameter, when destname is a destination name specified through the DEST parameter. |
| CMDAUTH=DEST | WRITER | ALTER | jesx.LOCAL.devicename jesx.RJE.devicename |
Authority to specific LOCAL or RJE printers or punches based on devicename. |
| CMDAUTH=DISPLAY | JESSPOOL | READ | node.userid.jobname.jobid node.userid.jobname.jobid.GROUP.ogroupid
|
Authority to issue D and L action characters for any job or output group to which they have READ access. |
| CMDAUTH=GROUP | JESSPOOL | ALTER | node.userid.jobname.jobid
node.userid.jobname.jobid.GROUP.ogroupid
|
Equivalent to GROUP for CMDAUTH, when jobname is the group prefix. (With structured TSO user IDs, you can specify user ID instead of jobname.) |
| CMDAUTH=INIT | SDSF | CONTROL | ISFINIT.I(xx).jesx | Equivalent to INIT for CMDAUTH, when xx is the initiator identifier. |
| CMDAUTH=NOTIFY | No direct SAF equivalent. | |||
| CMDAUTH=MSG | Logging of user access to resources is controlled by RACF. | |||
| CMDAUTH=USERID | JESSPOOL | ALTER | node.userid.jobname.jobid
node.userid.jobname.jobid.GROUP.ogroupid
|
Equivalent to USERID for CMDAUTH, when userid is the name of the job the user is trying to access. (Even when no profiles are defined in the JESSPOOL class, users are authorized to output that they own.) |
| CMDAUTH=ALL | SDSF | READ | ISFOPER.SYSTEM | Authority to issue the SDSF / command. |
| CMDAUTH=ALL | SDSF | READ | ISFOPER.DEST.jesx | SDSF does further checking for authority to jobs and output based on destination. |
| CMDAUTH=ALL | SDSF | ALTER | ISFAUTH.DEST.destname | Used with the above ISFOPER.DEST.jesx resource, is equivalent ALL for CMDAUTH, with no DEST parameter. Use generic profiles to give authority to all jobs and output. |
| CMDAUTH=ALL | WRITER | ALTER | jesx.LOCAL.devicename jesx.RJE.devicename |
Use generic profiles to give authority to all printers and punches. |
| CMDAUTH=ALL | SDSF | ALTER | ISFINIT.I(xx).jesx | Use generic profiles to give authority to all initiators. |
| CMDLEV | SDSF | UPDATE | ISFATTR.JOB.field
ISFATTR.OUTPUT.field ISFATTR.OUTDESC.field ISFATTR.CHECK.field ISFATTR.ENCLAVE.field ISFATTR.JOBCL.field IISFATTR.LINE.field ISFATTR.MEMBER.field ISFATTR.NETOPTS.field ISFATTR.NODE.field ISFATTR.OFFLOAD.field SFATTR.PROPTS.field ISFATTR.RDR.field ISFATTR.RESMON.field ISFATTR.RESOURCE.field ISFATTR.SPOOL.field ISFATTR.MODIFY.field ISFATTR.SELECT.field |
Authorizes use of overtypeable fields. |
| CMDLEV | OPERCMDS | Depends on the generated MVS™ or JES2 command. | ||
| DEST | SDSF | ALTER | ISFAUTH.DEST.destname | Equivalent to DEST for the CMDAUTH parameter, with a DEST parameter. In the SAF resource, destname is a destination name specified through the DEST parameter. |
| DEST | SDSF | READ | ISFAUTH.DEST.destname.Ddsid.dsname | Equivalent to DEST for the DSPAUTH parameter, with a DEST parameter. In the SAF resource, destname is a destination name specified through the DEST parameter. |
| DSPAUTH=ADEST | SDSF | READ | ISFOPER.DEST.jesx | SDSF does further checking for authority to jobs and output based on destination. |
| DSPAUTH=ADEST | SDSF | READ | ISFAUTH.DEST.destname.DATASET.dsname | Equivalent to ADEST for the DSPAUTH parameter, with a DEST parameter. In the SAF resource, destname is a destination name specified through the DEST parameter. |
| DSPAUTH=ALL | SDSF | READ | ISFOPER.DEST.jesx | SDSF does further checking for authority to jobs and output based on destination. |
| DSPAUTH=ALL | SDSF | READ | ISFAUTH.DEST.destname | Equivalent to ALL for the DSPAUTH parameter, with a DEST parameter. In the SAF resource, destname is a destination name specified through the DEST parameter. |
| DSPAUTH=AMDEST | SDSF | READ | ISFOPER.DEST.jesx | SDSF does further checking for authority to jobs and output based on destination. |
| DSPAUTH=AMDEST | SDSF | READ | ISFAUTH.DEST.destname.DATASET.JESMSGLG ISFAUTH.DEST.destname.DATASET.JESJCL
ISFAUTH.DEST.destname.DATASET.JESYSMSG
|
Equivalent to AMDEST for the DSPAUTH parameter, with a DEST Parameter, when JESMSGLG, JESJCL, JESYSMSG are data set names of JES2 message data sets and destname is a destination name specified through the DEST parameter. |
| DSPAUTH=AMSG | JESSPOOL | READ | node.userid.jobname.jobid.Ddsid.JESMSGLG node.userid.jobname.jobid.Ddsid.JESJCL
node.userid.jobname.jobid.Ddsid.JESYSMSG
|
Equivalent to AMSG for the DSPAUTH parameter, when JESMSGLG, JESJCL, JESYSMSG are data set names of JES2 message data sets. (You can define generic profiles for the above AMDEST resources to obtain equivalent function.) |
| DSPAUTH=GROUP | JESSPOOL | READ | node.userid.jobname.jobid.Ddsid.dsname | Equivalent to GROUP for the DSPAUTH parameter, when jobname is the group prefix. (With structured TSO user IDs, you can specify user ID instead of jobname.) |
| DSPAUTH=GRPMSG | JESSPOOL | READ | node.userid.jobname.jobid.Ddsid.JESMSGLG
node.userid.jobname.jobid.Ddsid.JESJCL
node.userid.jobname.jobid.Ddsid.JESYSMSG
|
Equivalent to GRPMSG for the DSPAUTH parameter, when JESMSGLG, JESJCL, JESYSMSG are data set names of JES2 message data sets and jobname is the group prefix. |
| DSPAUTH=NOTIFY | No direct SAF equivalent. | |||
| DSPAUTH=USERID | JESSPOOL | READ | node.userid.jobname.jobid.Ddsid.dsname | Equivalent to USERID for the DSPAUTH parameter, when userid is the name of the job the user is trying to access. (Even when no profiles are defined in the JESSPOOL class, users are authorized to output that they own.) |
| ICMD | JESSPOOL | ALTER | node.userid.jobname.jobid
node.userid.jobname.jobid.GROUP.ogroupid
|
Equivalent to the ICMD parameter, when jobname is a job name specified by the associated ISFNTBL macro or NTBL statement. |
| IDEST | SDSF | READ | ISFOPER.ANYDEST.jesx | If users do not have an IDEST parameter with initial destinations specified, they must have READ access to this resource, or no jobs can appear on the panels. |
| IDEST | SDSF | READ | ISFAUTH.DEST.destname | SDSF initialization function. Users must be authorized to the destnames that correspond to the initial destination values specified by their IDEST parameter. If not, no jobs can appear on the panels. |
| IDSP | JESSPOOL | READ | node.userid.jobname.jobid.Ddsid.dsname | Equivalent to the IDSP parameter, when jobname is a job name specified by the associated ISFNTBL macro or NTBL statement. |
| IDSPD | JESSPOOL | READ | node.userid.jobname.jobid.Ddsid.JESMSGLG node.userid.jobname.jobid.Ddsid.JESJCL
node.userid.jobname.jobid.Ddsid.JESYSMSG
|
Equivalent to the IDSPD parameter, when JESMSGLG, JESJCL, JESYSMSG are data set names of JES message data sets. |
| ISTATUS | Includes jobs on the SDSF panels based on job name. Work around by using a table build exit point. | |||
| XCMD | JESSPOOL | NONE | node.userid.jobname.jobid node.userid.jobname.jobid.GROUP.ogroupid
|
Equivalent to the XCMD parameter, when jobname is a job name specified by the associated ISFNTBL macro or NTBL statement and the access is NONE. |
| XDSP | JESSPOOL | NONE | node.userid.jobname.jobid.Ddsid.dsname | Equivalent to the XDSP parameter, when jobname is a job name specified by the associated ISFNTBL macro or NTBL statement and the access is NONE. |
| XDSPD | JESSPOOL | NONE | node.userid.jobname.jobid.Ddsid.dsname | Equivalent to the XDSPD parameter, when jobname is a job name specified by the associated ISFNTBL macro or NTBL statement and the access is NONE. |
| XDSPD | JESSPOOL | READ | node.userid.jobname.jobid.Ddsid.JESMSGLG
node.userid.jobname.jobid.Ddsid.JESJCL
node.userid.jobname.jobid.Ddsid.JESYSMSG
|
User must then be authorized to the message data sets for the job. |
| XSTATUS | Excludes jobs on the SDSF panels based on job name. Work around by using a table build exit point. | |||