SAF classes and resources for SDSF function

This topic summarizes the SAF resources required to protect SDSF function.

Table 1. SDSF Classes and Resources
Class SDSF Resource Resource Name
JESSPOOL Jobs, output groups, and SYSIN/SYSOUT data sets
nodeid.userid.jobname.jobid
nodeid.userid.jobname.jobid.
GROUP.ogroupid
nodeid.userid.jobname.jobid.
Ddsid.dsname
JESSPOOL Job step information
nodeid.userid.jobname.jobid.EVENTLOG.SMFSTEP
nodeid.userid.jobname.jobid.EVENTLOG.STEPDATA
JESSPOOL Access to the JES logical log, to display the SYSLOG
nodeid.+MASTER+.SYSLOG.SYSTEM.
sysname
LOGSTRM Access to the log stream, to display the OPERLOG SYSPLEX.OPERLOG
Access to the log stream, to display check history log-stream-name
OPERCMDS Generated MVS and JES commands Resource name is dependent on command generated
Server MODIFY command Resource name is dependent on command parameters
SDSF Membership in groups GROUP.groupname.servername
Connection to SDSFAUX ISF.CONNECT.sysname
APF data sets ISFAPF.datasetname
CF connections ISFCFC.connectionname
Start of changeCF data setsEnd of change Start of changeISFCFD.functionEnd of change
CF structures ISFCFS.structurename
Device activity ISFDEV.volser
DYNX data sets ISFDYNX.exitname
Enqueues ISFENQ.majorname.sysname
File systems ISFFS.filesystemname
Generic tracker events ISFGT.eventowner
Start of changeJES job resourcesEnd of change Start of changeISFJRJ.name.jobidEnd of change
Start of changeJES resource alertsEnd of change Start of changeISFRMA.type.jesxEnd of change
Start of changeJES resource informationEnd of change Start of changeISFJRI.name.jesxEnd of change
Start of changeJES resourcesEnd of change Start of changeISFRM.resname.jesxEnd of change
Start of changeJob classesEnd of change Start of changeISFJOBCL.classname.jesxEnd of change
Start of changeJob DDnamesEnd of change Start of changeISFJOB.DDNAME.owner.jobname.sysnameEnd of change
Start of changeJob modulesEnd of change Start of changeISFJOB.MODULE.owner.jobname.sysnameEnd of change
Start of changeJob tasksEnd of change Start of changeISFJOB.TASK.owner.jobname.sysnameEnd of change
Link list data sets ISFLNK.datasetname
Start of changeLink list setsEnd of change Start of changeISFLLS.name.setsysnameEnd of change
Start of changeMAS membersEnd of change Start of changeISFMEMB.name.jesxEnd of change
Start of changeMemoryEnd of change Start of changeISFJOB.STORAGE.owner.jobname.sysnameEnd of change
Network activity ISFNETACT.jobname
Start of changeNJE connection objects (appl)End of change Start of changeISFAPPL.devname.jesxEnd of change
Start of changeSDSF (continued)End of change Start of changeNJE connection objects (sockets)End of change Start of changeISFSOCK.devname.jesxEnd of change
Start of changeNJE linesEnd of change Start of changeISFLINE.name.jesxEnd of change
Parmlib data sets ISFPARM.datasetname
Page data sets ISFPAG.datasetname
Proclib data sets ISFPLIB.proclib-name
SMS storage groups ISFSTORGRP.storagegroupname
SMS volumes ISFSMSVOL.volume
Spool offloaders ISFSO.name.jesx
Start of changeSpool volumesEnd of change Start of changeISFSP.name.jesxEnd of change
Subsystems ISFSUBSYS.subsysname
Start of changeSystem parametersEnd of change Start of changeISFSYSP.parmnameEnd of change
Start of changeSystem requestsEnd of change Start of changeISFSR.type.sysname.jobnameEnd of change
System symbols ISFSYM.symbolname.sysname
Systems ISFSYS.sysplexname.systemname
SDSF panels and authorized commands ISFCMD (High-level qualifier)
MVS/JES command line commands (/) ISFOPER.SYSTEM
Overtypeable fields ISFATTR (High-level qualifier)
Destination names ISFOPER.ANYDEST.jesx (all destinations) ISFAUTH.DEST.destname
Operator authority by destination
ISFOPER.DEST
ISFAUTH.DEST
(High-level qualifiers)
Enclaves ISFENC.subsys-type.subsys-name
Initiators ISFINIT.I(xx).jesx
Job classes ISFJOBCL.class.jesx
Job devices ISFJDD.type.sysname
JC action character (display job module)
ISFCMD.ODSP.CDE.system
ISFJOB.MODULE.owner.jobname.system
JD action character (display job devices)
ISFCMD.ODSP.DEVICE.system
ISFJOB.DDNAME.owner.jobname.system
JM action character (display job memory)
ISFCMD.ODSP.STORAGE.system
ISFJOB.STORAGE.owner.jobname.system
SDSF (continued) JY action character (display job delays) ISFDISP.DELAY.owner.jobname
JT action character (display job task)
ISFCMD.ODSP.TCB.system
ISFJOB.TASK.owner.jobname.system
MAS or JESPLEX members ISFMEMB.membername.jesx
Lines ISFLINE.devicename.jesx
Network connections
ISFAPPL.devicename.jesx
ISFLINE.devicename.jesx
ISFSOCK.devicename.jesx
Network servers ISFNS.devicename.jesx
Nodes ISFNODE.nodename.jesx
Spool offloaders (JES2 only) ISFSO.devicename.jesx
Readers ISFRDR.devicename.jesx
JES resources (JES2 only) ISFRM.resource.jesx
Spool volumes ISFSP.volser.jesx
Spool partitions ISFSP.partname.jesx
WLM resources ISFRES.resource.system
Scheduling environments ISFSE.scheduling-env.system
z/OS UNIX processes ISFPROC.owner.jobname
System requests ISFSR.type.system.jobname
Reverting to ISFPARMS in assembler macro format SERVER.NOPARM
EMCS consoles ISFEMCS.consolename
JES subsystems ISFJES.subsysname
Job class members ISFJOBCL.class.jesx
OMVS options ISFOMVS.optionname
Resource monitor alerts ISFRMS.type.jesx
XCF groups and members ISFXCFM.membername
JESInfo resources ISFJRI.resourcename.jesx
JESInfo by job resources ISFJRJ.jobname.jobid
WRITER Printers and punches
jesx.LOCAL.devicename
jesx.RJE.devicename
XFACILIT Checks from IBM® Health Checker for z/OS® HZS.sysname.checkowner.checkname.action