Adding an Entry to the RACF Class - ironstream_for_micro_focus_universal_discovery - 7.4

Ironstream for Micro Focus® Universal Discovery for IBM Z® Installation

Product type
Software
Portfolio
Integrate
Product family
Ironstream
Product
Ironstream > Ironstream for Micro Focus® Universal Discovery
Version
7.4
Language
English
Product name
Ironstream for Micro Focus Universal Discovery for IBM Z
Title
Ironstream for Micro Focus® Universal Discovery for IBM Z® Installation
Copyright
2022
First publish date
2007
Last updated
2023-11-28
Published on
2023-11-28T05:42:35.385852

The VP390 task or the task’s owning user requires a z/OS UNIX System Services (USS) segment. Because USS segments are associated with RACF-defined user IDs, you should add an identifying entry for VP390 to a RACF class to meet the USS requirement.

This addition allows the VP390 to run as a started task. If the VP390 is to be run as a submitted job, enter the user ID on the JOB card of the startup job.

To add an entry to the RACF class, follow these steps:

  1. Verify that the STARTED class is defined by entering the following command:

RLIST STARTED *

This command displays a list of entries for the STARTED class.

  1. Determine whether a RACF user (for example, IBMUSER) has an OMVS segment by entering the following command:

LU IBMUSER OMVS

  1. If the STARTED class is activated, add the VP390 task to the defined user (for example, IBMUSER) by entering the following:

RDEFINE STARTED VP390.VP390 STDATA(USER(IBMUSER) GROUP(SYS1))

Then refresh the class by entering the following:

SETROPTS RACLIST(STARTED) REFRESH

If the STARTED class is not activated, assign RACF identities to the started procedures. Incorporate the following sample into the ICHRIN03 job of SYS1.SAMPLIB(RACTABLE).
Example:

RACF allows the started procedures table to contain a generic entry, indicated by an asterisk (* ) in the procedure-name field. When searching the table for a procedure-name match, if RACF finds a procedure name of "*" as the last entry in the table and the procedure name was not specifically matched by any other entry in the table, RACF uses the "*" entry as a match for the procedure.

This procedure is documented in the IBM Security Server (RACF) System Programmer's Guide.