RACF Permissions - ironstream_for_micro_focus_universal_discovery - 7.4

Ironstream for Micro Focus® Universal Discovery for IBM Z® Installation
Product type
Software
Portfolio
Integrate
Product family
Ironstream
Product
Ironstream > Ironstream for Micro Focus® Universal Discovery
Version
7.4
Language
English
Product name
Ironstream for Micro Focus Universal Discovery for IBM Z
Title
Ironstream for Micro Focus® Universal Discovery for IBM Z® Installation
Copyright
2022
First publish date
2007
Last updated
2023-11-28
Published on
2023-11-28T05:42:35.385852

This table shows the commands that are issued by Ironstream to collect the discovery information, and the security configuration changes needed for the user ID or group which Ironstream is running under.

Commands Issued

RACF

General Resource

Native or RACF Security Configuration Requirements

SubsystemPrefix DISPLAY DDF

DSNR

MDSNSM

With native Db2 security:

Grant authority to DISPLAYAUTH group Class = DSNR

Profile = DB2SSID.BATCH with Authority READ

With RACF/DB2 security:

Grant authority to DISPLAYAUTH group Class = DSNR

Profile = DB2SSID.BATCH with Authority READ

Class = MDSNSM

Profile = DB2SSID.DISPLAY with Authority READ

SubsystemPrefix DISPLAY GROUP

DSNR

MDSNSM

With native DB2 security:

Grant authority to DISPLAYAUTH group Class = DSNR

Profile = DB2SSID.BATCH with Authority READ With RACF / DB2 security:

Grant authority to DISPLAYAUTH group

Class = DSNR

Profile = DB2SSID.BATCH with Authority READ

Class = MDSNSM

Profile = DB2SSID.DISPLAY with Authority READ

SELECT * FROM SYSIBM.LOCATIONS; SELECT * FROM SYSIBM.SYSDATABASE; SELECT * FROM SYSIBM.SYSTABLESPACE;

DSNR

MDSNTB

With native DB2 security:

Grant authority to DISPLAYAUTH group Class = DSNR

Profile = DB2SSID.BATCH with Authority READ

With RACF / DB2 security:

Grant authority to DISPLAYAUTH group

Class = DSNR

Profile = DB2SSID.BATCH with Authority READ

Class = MDSNTB

Profile = DB2SSID.OWNER.TABLE.ACTION with

Authority READ

e.g.: Profile = DB2SSID.*.*.SELECT

or Profile = DB2SSID.SYSIBM.*.SELECT

or Profile =

DB2SSID.SYSIBM.LOCATIONS.SELECT

(access required must be granted to the most specific RACF

rule defined)