Steps for placing TSO commands in a library protected by RACF

To restrict FlashCopy® TSO commands to authorized storage administrators only, place the commands in a library protected by RACF®.

Perform the following steps to place FlashCopy commands in a library that RACF protects:

1. Issue the following RDEFINE command for each FlashCopy command that you want defined to RACF:

   RDEFINE PROGRAM cmdname ADDMEM(‘SYS1.CMDLIB’) UACC(NONE)

   where:

   cmdname

   Defines the FlashCopy command name. Issue a separate RDEFINE command for each of the FlashCopy commands. RACF can only perform checking on commands that are defined to it.

2. Issue the PERMIT command for all commands and authorized FlashCopy TSO command users as follows:

   PERMIT cmdname CLASS(PROGRAM) ID(name) ACCESS(READ)

   where:

   cmdname

   Defines the FlashCopy TSO command name.

   name

   Defines the user ID receiving RACF access authority for that command name.

3. Issue the SETROPTS command from a user ID having the appropriate authority:

   SETROPTS CLASSACT(PROGRAM) WHEN(PROGRAM) REFRESH