We would like to restrict the COMPLETE command for JOBs in ESP. We use ESP Workstation. How to set it up with RACF?
Release : 12.0
You can restrict on prefix.CSF.LC.C profile, like grant NONE to it. Note: C is the CSF command to force complete a job.
And also need to adjust following:
- Grant READ to prefix.CHECK.CMDS;
- Change SAFOPTS to GlobalCSF: this will make sure the restriction will work from other panel, like ESP Workstation or page mode.
See more on doc link below:
https://techdocs.broadcom.com/us/en/ca-mainframe-software/automation/ca-workload-automation-esp-edition/12-0/securing/create-security-profiles.html