z/OS MVS Planning: Operations
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Controlling how to change the APF list format

z/OS MVS Planning: Operations
SA23-1390-00

To control who can make the APF list dynamic, the RACF® security administrator can take the following steps:

  1. To establish a profile for the following command name to the FACILITY class, issue RDEFINE:
    RDEFINE FACILITY CSVAPF.MVS.SETPROG.FORMAT.DYNAMIC UACC(NONE)
  2. To permit the user (in this example user OPER1) to use the command in the class, issue the following:
    PERMIT CSVAPF.MVS.SETPROG.FORMAT.DYNAMIC CLASS(FACILITY) ID(OPER1) ACCESS(UPDATE

    OPER1 must be the name of a RACF-defined user or group profile.

    Note: Instead of specifying individual userids, you can specify the name of a RACF group profile and connect authorized users to the group. See Defining RACF profiles.
  3. If the FACILITY class is not already active, issue the SETROPTS command as follows:
    SETROPTS CLASSACT(FACILITY)

    (To ensure that the FACILITY class is active, you can issue the SETROPTS LIST command.)

  4. To refresh the FACILITY resource class, issue SETROPTS RACLIST:
    SETROPTS RACLIST(FACILITY) REFRESH

To control who can to make the APF list static, the RACF security administrator can take the following steps:

  1. Issue RDEFINE to establish a profile for the following command name for the FACILITY class:
    RDEFINE FACILITY CSVAPF.MVS.SETPROG.FORMAT.STATIC UACC(NONE)
  2. To permit the user (in this example user OPER1) to use the command in the class, issue the following:
    PERMIT CSVAPF.MVS.SETPROG.FORMAT.STATIC CLASS(FACILITY) ID(OPER1) ACCESS(UPDATE)

    OPER1 must be the name of a RACF-defined user or group profile.

    Note: Instead of specifying individual userids, you can specify the name of a RACF group profile and connect authorized users to the group. See Defining RACF profiles.
  3. If the FACILITY class is not already active, issue the SETROPTS command as follows:
    SETROPTS CLASSACT(FACILITY)

    (To ensure that the FACILITY class is active, you can issue the SETROPTS LIST command.)

  4. To refresh the FACILITY resource class, issue SETROPTS RACLIST:
    SETROPTS RACLIST(FACILITY) REFRESH

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014