Adding an Entry to the RACF Class - ironstream_for_servicenow_discovery_1 - 7.5

Ironstream™ Software for ServiceNow® Discovery for IBM Z® Installation

Product type
Software
Portfolio
Integrate
Product family
Ironstream™ software
Product
Ironstream™ software > Ironstream™ software for ServiceNow® Discovery
Version
7.5
ft:locale
en-US
Product name
Ironstream™ Software for ServiceNow® Discovery for IBM Z®
ft:title
Ironstream™ Software for ServiceNow® Discovery for IBM Z® Installation
First publish date
2007
ft:lastEdition
2026-02-03
ft:lastPublication
2026-02-03T14:17:18.347000
L1_Product_Gateway
Integrate
L2_Product_Segment
Data Integration
L3_Product_Brand
Precisely Ironstream
L4_Investment_Segment
Log Data Integration
L5_Product_Group
LDI - Ironstream
L6_Product_Name
Ironstream for ServiceNow

The VP390 task or the task’s owning user requires a z/OS UNIX System Services (USS) segment. Because USS segments are associated with RACF-defined user IDs, you should add an identifying entry for VP390 to a RACF class to meet the USS requirement.

This addition allows the VP390 to run as a started task. If the VP390 is to be run as a submitted job, enter the user ID on the JOB card of the startup job.

To add an entry to the RACF class, follow these steps:

  1. Verify that the STARTED class is defined by entering this command:
    RLIST STARTED *

    This command displays a list of entries for the STARTED class.

  2. Determine whether a RACF user (for example, IBMUSER) has an OMVS segment by entering this command:
    LU IBMUSER OMVS
  3. If the STARTED class is activated, add the VP390 task to the defined user (for example, IBMUSER) by entering this command:
    RDEFINE STARTED VP390.VP390 STDATA(USER(IBMUSER) GROUP(SYS1))

    Then refresh the class by entering this:

    SETROPTS RACLIST(STARTED) REFRESH

    If the STARTED class is not activated, assign RACF identities to the started procedures.

    Incorporate this sample into the ICHRIN03 job of SYS1.SAMPLIB(RACTABLE)

    Example:

    
    ICHRIN03 CSECT
    COUNT    DC AL2(((ENDRIN03-COUNT-2)/32)+32768)
    *-------New VP390 Entry-----------------
    ENTRY1   EQU *
    PROC1    DC CL8'VP390 '
    USERID   DC CL8'IBMUSER '
    GROUP1   DC CL8'SYS1 '
    FLAGS1   DC XL1'00'
             DC XL7'00'
    *-------Last Entry----------------------
    ENTRY2   EQU *
    PROC2    DC CL8'* '
    USERID2  DC CL8'IBMUSER '
    GROUP2   DC CL8'= '
    FLAG2    DC XL1'00'
             DC XL7'00'
    ENDRIN03 EQU *
    END
    
    

RACF allows the started procedures table to contain a generic entry, indicated by an asterisk (* ) in the procedure-name field. When searching the table for a procedure-name match, if RACF finds a procedure name of "*" as the last entry in the table and the procedure name was not specifically matched by any other entry in the table, RACF uses the "*" entry as a match for the procedure. This procedure is documented in the IBM Security Server (RACF) System Programmer's Guide.