To allow a TSO user to cancel all jobs that originate on nodes you treat as local nodes, do the following:

1. Define a profile named &RACLNDE in the RACFVARS class, specifying on the ADDMEM operand which nodes are to be treated as local:

   RDEFINE RACFVARS &RACLNDE UACC(NONE) ADDMEM(POKMVS1 POKMVS2)

   UACC(NONE) is recommended to protect the &RACLNDE profile itself.

2. Define a profile in the JESJOBS class as follows:

   RDEFINE JESJOBS CANCEL.&RACLNDE.*.* UACC(NONE)

   This example assumes that a SETROPTS GENERIC(classname) was previously issued to turn generics on for this class and that a SETROPTS REFRESH was then done.

3. Give the appropriate access to the TSO user:

   PERMIT CANCEL.&RACLNDE.*.* CLASS(JESJOBS) ID(USER1) ACCESS(ALTER)

   If there are any other JESJOBS resources that begin with CANCEL, you might also need to permit users appropriate access to those.

4. If you have not already done so, activate the JESJOBS and RACFVARS classes:

   SETROPTS CLASSACT(JESJOBS RACFVARS)

5. Refresh SETROPTS RACLIST processing for the RACFVARS class for the change to take effect:

   SETROPTS RACLIST(RACFVARS) REFRESH

If, later, you decide that node POKMVS2 should no longer be treated as a local node, do the following:

RALTER   RACFVARS &RACLNDE DELMEM(POKMVS2)
SETROPTS RACLIST(RACFVARS) REFRESH
SETROPTS GENERIC(JESJOBS)  REFRESH

If, later, you decide that USER2 should also be allowed to cancel local jobs, do the following:

PERMIT   CANCEL.&RACLNDE.*.* CLASS(JESJOBS) ID(USER2) ACCESS(ALTER)
SETROPTS GENERIC(JESJOBS) REFRESH