What Does IBMFAC(IRR.RADMIN.xxxx) Allow?

Products

• Top Secret

Issue/Introduction

The manual for a product called "Vanguard Compliance Manager" states to define these resources in Top Secret:

IBMFAC(IRR.RADMIN.LISTUSER)

IBMFAC(IRR.RADMIN.LISTGRP)

IBMFAC(IRR.RADMIN.RLIST)

IBMFAC(IRR.RADMIN.SETROPTS.LIST)

Are these resources for RACF administrative function? If they are, do they work for Top Secret?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

Access to IBMFAC(IRR.ADMIN.xxxx) allows permission to use r_admin, It does not give permission to issue TSS  commands for which you are not authorized. R_admin allows applications to pass a Top Secret command buffer used to update the Top Secret security file.