To control who can make the APF list dynamic, the RACF® security administrator can take the following
steps:
- To establish a profile for the following command name to the FACILITY
class, issue RDEFINE:
RDEFINE FACILITY CSVAPF.MVS.SETPROG.FORMAT.DYNAMIC UACC(NONE)
- To permit the user (in this example user OPER1) to use the command
in the class, issue the following:
PERMIT CSVAPF.MVS.SETPROG.FORMAT.DYNAMIC CLASS(FACILITY) ID(OPER1) ACCESS(UPDATE
OPER1
must be the name of a RACF-defined user or group profile.
Note: Instead
of specifying individual userids, you can specify the name of a RACF group profile and connect
authorized users to the group. See
Defining RACF profiles.
- If the FACILITY class is not already active, issue the SETROPTS
command as follows:
SETROPTS CLASSACT(FACILITY)
(To
ensure that the FACILITY class is active, you can issue the SETROPTS
LIST command.)
- To refresh the FACILITY resource class, issue SETROPTS RACLIST:
SETROPTS RACLIST(FACILITY) REFRESH
To control who can to make the APF list static, the RACF security administrator can take the following
steps:
- Issue RDEFINE to establish a profile for the following command
name for the FACILITY class:
RDEFINE FACILITY CSVAPF.MVS.SETPROG.FORMAT.STATIC UACC(NONE)
- To permit the user (in this example user OPER1) to use the command
in the class, issue the following:
PERMIT CSVAPF.MVS.SETPROG.FORMAT.STATIC CLASS(FACILITY) ID(OPER1) ACCESS(UPDATE)
OPER1
must be the name of a RACF-defined user or group profile.
Note: Instead
of specifying individual userids, you can specify the name of a RACF group profile and connect
authorized users to the group. See
Defining RACF profiles.
- If the FACILITY class is not already active, issue the SETROPTS
command as follows:
SETROPTS CLASSACT(FACILITY)
(To
ensure that the FACILITY class is active, you can issue the SETROPTS
LIST command.)
- To refresh the FACILITY resource class, issue SETROPTS RACLIST:
SETROPTS RACLIST(FACILITY) REFRESH