How can a users ACF2 profile OPERPARM settings be used for z/OSMF consoles
search cancel

How can a users ACF2 profile OPERPARM settings be used for z/OSMF consoles

book

Article ID: 118223

calendar_today

Updated On:

Products

ACF2 ACF2 - DB2 Option ACF2 for zVM ACF2 - z/OS ACF2 - MISC

Issue/Introduction



How can a users ACF2 profile OPERPARM settings be used for z/OSMF consoles?

? SET PROFILE(USER) DIV(OPERPARM) 
? LIST LIKE(ABC-) 
OPERPARM / ABCDEFGH LAST CHANGED BY SECADMIN ON 10/02/22-07:25 
AUTH(MASTER) MFORM(TIME SYSID JOBNAME) 
OPERMSCP(*ALL ) ROUTCODE(1-128) 

Environment

z/OS 2.3
z/OSMF
ACF2 r16

Resolution

To get the OPERPARM data to be passed, operator command validation must be active.  By default ACF2 ignores those calls.  If you only want this for the EMCS under z/OSMF and not all operator commands to be validated, then a SAFDEF record is needed with a PROGRAM of CONSOLE.

SET Control(GSO)
INSERT SAFDEF.OPERCMD ID(OPERCMDS) MODE(GLOBAL)  RACROUTE(REQUEST=AUTH,CLASS=OPERCMDS) PROGRAM(CONSOLE)

F ACF2,REFRESH(SAFDEF)

This allows the EMCS to pick up the OPERPARM settings. 
Note: for the extract of the OPERPARM profile to work, you must create a logonid that matches the name of the console. e.g. ABCDEFGH