z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Example of protecting several tape volumes using the RACFVARS class

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

The easiest way to show how to use the RACFVARS class is by an example.

Suppose you want to protect several tape volumes called TAP111, A22222, and B33OLD, and give ALTER access to them only to a group called PAYGRP. There is no resource grouping class for the TAPEVOL class and the names of the tape volumes are unlike, so you choose the RACFVARS method to protect the tape volumes. To do this, enter:
RDEFINE  RACFVARS &PAYTAPE UACC(NONE) ADDMEM(TAP111 A22222 B33OLD)
RDEFINE  TAPEVOL  &PAYTAPE UACC(NONE)
PERMIT   &PAYTAPE CLASS(TAPEVOL) ID(PAYGRP) ACCESS(ALTER)
SETROPTS CLASSACT(TAPEVOL RACFVARS) RACLIST(RACFVARS)
If you later need to add a tape volume called C44TAP to the list of protected tape volumes, enter:
RALTER   RACFVARS &PAYTAPE ADDMEM(C44TAP)
SETROPTS RACLIST(RACFVARS) REFRESH

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014