Using RACF with PSF for z/OS

PSF for z/OS: Security Guide

Using RACF with PSF for z/OS

PSF for z/OS: Security Guide
S550-0434-03

Use RACF® to activate PSFMPL and create RACF profiles.

Note:

RACF CLASS PSFMPL must be refreshed after activating PSFMPL or creating new profiles.

To activate print labeling, use SETROPTS. To set print labeling defaults to YES, use the RDEFINE command. RDEFINE creates RACF profiles. See Figure 13 for examples of using SETROPTS and RDEFINE.
Figure 13. Using the RACF SETROPTS and RDEFINE Commands
```
 SETROPTS CLASSACT(PSFMPL)
 RDEFINE PSFMPL PSF.DPAGELBL UACC(NONE)
 RDEFINE PSFMPL PSF.SYSAREA UACC(NONE)		
```
If you want to authorize a print job submitter to override printer defaults, issue the PERMIT commands in Figure 14 to add the user ID to the RACF profile.
Figure 14. Adding a User ID to a RACF Profile
```
 PERMIT PSF.DPAGELBL CLASS(PSFMPL) ID(userid) ACCESS(READ)
 PERMIT PSF.SYSAREA CLASS(PSFMPL) ID(userid) ACCESS(READ) 		
```
Whenever any of the commands shown in Figure 13 or Figure 14 are used, issue the REFRESH command illustrated in Figure 15 to refresh RACF.
Figure 15. Refreshing RACF
```
 SETROPTS RACLIST(PSFMPL) REFRESH		
```