z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Steps for specifying daily logon statistics

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

To specify recording of daily logon statistics for a selected application, perform the following steps:
  1. Determine the name of the application. See your programmer or refer to the documentation for the application to determine the application name specified on its RACROUTE REQUEST=VERIFY requests.

    ______________________________________________________________________

  2. Create or modify a profile in the APPL class for the application name and specify daily logon statistics, as follows.
    • If not already defined, create a new APPL profile for this application name and specify daily logon statistics.

      Example:

      RDEFINE APPL applname UACC(NONE) APPLDATA('RACF-INITSTATS(DAILY)')

      Tip: If similarly named applications have the same requirements, create a generic APPL profile.

      Example:

      RDEFINE APPL CICSREG* UACC(NONE) APPLDATA('RACF-INITSTATS(DAILY)')

      _________________________________________________________________

    • If an APPL class profile for this application is already defined, modify the profile to specify daily logon statistics:
      RALTER APPL applname APPLDATA('RACF-INITSTATS(DAILY)')

      _________________________________________________________________

    • If the APPL class profile for this application already contains a value in the APPLDATA field, modify the existing APPLDATA value to include the RACF-INITSTATS(DAILY) text string.
      Examples:
      RALTER APPL applname 
         APPLDATA('existing application data RACF-INITSTATS(DAILY)')
      RALTER APPL applname 
         APPLDATA('RACF-INITSTATS(DAILY) existing application data')

    ______________________________________________________________________

  3. If you created a new APPL profile for the application in Step 2 and you specified UACC(NONE), authorize appropriate users and groups to access the application.
    Example:
    PERMIT applname CLASS(APPL) ID(userid-or-group) ACCESS(READ)

    ______________________________________________________________________

  4. Activate your changes, as follows.
    • If the APPL class is not already active, activate the APPL class.

      Guideline: Activate RACLIST processing for the APPL class for improved performance, especially for high usage applications that issue RACROUTE REQUEST=VERIFY requests for every user.

      Example:
      SETROPTS CLASSACT(APPL) RACLIST(APPL)
    • If the APPL class is already active and RACLISTed, refresh the APPL class.
      Example:
      SETROPTS RACLIST(APPL) REFRESH

    ______________________________________________________________________

You have now specified recording of daily logon statistics for a selected application.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014