Protecting the vector facility

If your processor has a vector facility, you can use RACF® to protect it.

To do this, perform the following steps.

Define the IEAVECTOR profile in the FACILITY class.
```
RDEFINE FACILITY IEAVECTOR UACC(NONE)
```
This command specifies that no users can use the vector facility.

Give READ access authority to appropriate users or groups.

PERMIT IEAVECTOR CLASS(FACILITY) ID(user or group) ACCESS(READ)

Activate the FACILITY class (if it is not already active).
```
SETROPTS CLASSACT(FACILITY)
```

If your installation does not need to control the use of the vector facility, you can define an entry for IEAVECTOR in the global access checking table. Global access checking allows your installation to bypass normal RACF authorization checking and, thereby, minimize processing.

To define an entry for the vector facility in the global access checking table, issue the following commands.

RDEFINE  GLOBAL FACILITY
RALTER   GLOBAL FACILITY ADDMEM(IEAVECTOR/READ)
SETROPTS GLOBAL(FACILITY)

For more information, see Setting up the global access checking table.