What is the Zowe resource type
search cancel

What is the Zowe resource type

book

Article ID: 203616

calendar_today

Updated On:

Products

ACF2 ACF2 - DB2 Option ACF2 for zVM ACF2 - z/OS ACF2 - MISC LDAP SERVER FOR Z/OS PAM CLIENT FOR LINUX ON MAINFRAME WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

Is there documentation on the Zowe resource type? I have looked at the Zowe docs and can not find anything -

ACF04056 ACCESS TO RESOURCE XXXX.0.COR.GET.PLUGINS TYPE RZOW BY USER001
NOT AUTHORIZED

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

ZOWE class defining the RACF ZOWE class at https://docs.zowe.org/v1-8-x/user-guide/mvd-configuration.html#defining-the-racf-zowe-class. The information below is from that documentation:

If you use RACF security, take the following steps define the ZOWE class to the CDT class:

Make sure that the CDT class is active and RACLISTed.
In TSO, issue the following command:
RDEFINE CDT ZOWE UACC(NONE)CDTINFO( DEFAULTUACC(NONE) FIRST(ALPHA) OTHER(ALPHA,NATIONAL,NUMERIC,SPECIAL) MAXLENGTH(246) POSIT(607) RACLIST(DISALLOWED))
If you receive the following message, ignore it:
"Warning: The POSIT value is not within the recommended ranges for installation use. The valid ranges are 19-56 and 128-527."
In TSO, issue the following command to refresh the CDT class:
SETROPTS RACLIST(CDT) REFRESH
In TSO, issue the following command to activate the ZOWE class:
SETROPTS CLASSACT(ZOWE)
For more information RACF security administration, see the IBM Knowledge Center at https://www.ibm.com/support/knowledgecenter/

In order for ACF2 to use rules against this resource insert a classmap record for ZOWE, and update the INFODIR record. Use the following ACF2 commands would be:

ACF
SET C(GSO) SYSID(ABCD)                                              
INSERT CLASMAP.ZOWE ENTITYLN(39) RESOURCE(ZOWEZLUX) RSRCTYPE(ZOW) 
F ACF2,REFRESH(CLASMAP)                                            

SET CONTROL(GSO) SYSID(ABCD)                                       
CHANGE INFODIR TYPES(R-RZOW) ADD
F ACF2,REFRESH(INFODIR) 

Additional Information

https://techdocs.broadcom.com/us/en/ca-mainframe-software/security/ca-acf2-for-z-os/16-0/administrating/administer-records/global-system-option-records-gso/environments-for-saf-calls-safdef.html