z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Controlling the use of job names

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

You can use profiles in the JESJOBS class to control which job names users can submit, cancel, or modify.

Because most installations have many jobs and users, it might not be practical to define all of the profiles needed to authorize every job name. A more reasonable approach would be to restrict the use of only certain job names.

You can specify which job names can be entered from a specific device. For more information, see Conditional access lists for general resource profiles and the note in Step 4 of Controlling who can submit jobs by job name.

Note:
  1. TSO installation exit IKJEFF53 must be modified to become a dummy exit when the JESJOBS class is active. See z/OS TSO/E Customization for specific information.
  2. At least one generic profile with a universal access of READ is required for the TSO SUBMIT command when the JESJOBS class is active. A generic profile is not required for the TSO CANCEL command. However, without a generic profile, only the owner of a job or those granted access through RACF® profiles can use the CANCEL command on data sets associated with that job.
  3. The JESJOBS class does not apply to jobs submitted via RJE/RJP consoles. Refer to Remote workstations (RJP/RJE consoles).

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014