Domain name

Name of the domain.

Description

Description of the domain.

Domain administrator

Type the user ID of an administrator for the domain, then click Add to add it to the list of administrators for the domain. A group is not allowed.

Selected domain administrators

List of administrators for the domain. Use the Remove and Remove All to remove administrator user IDs from the list.

Network administrator

Type the user ID of a network administrator for the domain, then click Add to add it to the list of network administrators for the domain. A group is not allowed.

Selected network administrators

List of network administrators for the domain. Use the Remove and Remove All to remove administrator user IDs from the list.

Workload administrator

Type the user ID of a workload administrator for the domain, then click Add to add it to the list of workload administrators for the domain. A group is not allowed.

Selected workload administrators

List of workload administrators for the domain. Use the Remove and Remove All to remove administrator user IDs from the list.

Approvers for templates

Selected approvers for templates

Define the approvers for templates, which are shown in the Selected approvers for templates field.

To add a user ID to the list of selected approvers for templates, type the user ID in the Approvers for templates field, then click Add.

To Remove a user ID from the list of selected approvers for templates, click the user ID in the list, then click Remove.

Available Systems

Systems for this domain

Define the systems to include in the domain. The Available systems table shows the systems that are available to be included, in the form sysplex-name.system-name. LOCAL indicates the system that you are logged on to. The available systems are the group of systems named IYUCLOUD.

If there are no systems to select, update the group of systems named IYUCLOUD with the Systems task of the z/OSMF Settings category. Then, on the Create Domain page, click Refresh to update the table of systems.

Use Add or Remove to build the set of systems for the domain.

For more information, see Removing systems from a domain.

Security definition

Select the type of security definition:

Automatic

z/OSMF uses a workflow to perform security setup dynamically. This is the default.

Manual

Security setup must be performed manually. If you select this option, the state of the domain is initially set to Pending Security Update. When the security setup is complete, use the Set Security Complete action for the domain.

To see the relevant SAF resources, use the View action for the domain.

Security administrator

Type the user ID of the security administrator. A group is not allowed.

The security administrator ID must be a member of the z/OSMF security administrator group (IZUSECAD, by default).

Specify customized security JCL JOB statement

Select this to supply JOB statement JCL for jobs that manage security definitions for cloud resources such as domains and templates. These jobs are submitted dynamically when the cloud resources are created, modified, or deleted.

This field is included only when Automatic is specified for Security definition.

JOB statement JCL

Supply JOB statement JCL to be used in jobs that manage security definitions for cloud resources such as domains and templates. z/OSMF creates and submits the jobs for you when cloud resources are created, modified, or deleted.

Job names:

• Can be up to 8 characters, consisting of A-Z, a-z, 0-9, and these special characters: # $ @
• Must start with an alphabetic character or one of these special characters: # $ @
• Can use workflow variables, which you specify as follows:

  ${_workflow-workflowOwnerUpper}

  Workflow owner

  ${_step-stepOwnerUpper}

  Workflow step owner

Account information can be a maximum of 143 characters, including commas, quotation marks, and parentheses. When a subparameter contains characters other than alphanumeric characters or #, $, @, it must be enclosed in apostrophes.

Separate subparameters with commas and enclose them in parentheses, for example, (5438,GROUP6) or '5438,GROUOP6'. When enclosed in apostrophes, additional apostrophes must be added in pairs, for example, 'DEPT''58'.

Click Restore Default to discard any changes you have made and restore the default JCL.

Removing systems from a domain

Removing a system from a domain prevents that system from being assigned to new resource pools. However, existing resource pools are not modified when the system is removed from the domain. Therefore, it is still possible for templates for those resource pools to provision instances on the system that was removed from the domain.

To prevent further provisioning of instances on the system that you remove from the domain, modify the template and resource pools for the appropriate tenants to remove that system from the set of systems for provisioning. The template must not have any existing instances that are already provisioned on the system that you want to remove.