Sample JCL to create an SCA administrator authorized to do installs

Products

• Top Secret

Issue/Introduction

Sample JCL to create SCA type security admistrator authorized to signon to TSO and SDSF ***AND*** has the authority to do software installs.

 

 

Environment

Release : 16.0

Resolution

Here is a sample job to create two SCA's allowed to signon to TSO and SDSF for system admins doing installs.

MSCA must be used to create the SCA.

//ADMINJOB  JOB (40100000),'USERA',CLASS=A,MSGCLASS=X,
//       USER=MASTER1,PASS=xxxxxxx
//*
//TSSTMP       PROC     PRINT=X        ///*SYSOUT O/P DESTINATION  */
//TSSTMP       EXEC     PGM=IKJEFT01
//SYSPRINT     DD       SYSOUT=&PRINT
//SYSTSPRT     DD       SYSOUT=&PRINT,
//             DCB=(LRECL=133,BLKSIZE=133,RECFM=FA)
//SYSTSIN      DD       DDNAME=TSSIN
//             PEND
//*
//BACKTMP      EXEC     TSSTMP
//TSSIN        DD *
TSS CREATE(USER01) NAME('USER01 ') TYPE(SCA) PASS(USER01)
TSS ADDTO(USER01) TSOLPROC(procname)
TSS ADDTO(USER01) TSOLACCT(nnnnnnnnn)
TSS ADDTO(USER01) FACILITY(ALL)
TSS ADDTO(USER01) NOVOLCHK NORESCHK NODSNCHK NOSUBCHK NOLCFCHK
TSS ADMIN(USER01) MISC1(ALL) MISC2(ALL) MISC3(ALL) MISC4(ALL)
TSS ADMIN(USER01) MISC5(ALL) MISC7(ALL) MISC8(ALL) MISC9(ALL)
TSS ADMIN(USER01) ACID(ALL) FAC(ALL) DATA(ALL,PASSWORD)
TSS ADMIN(USER01) RESOURCE(ALL) ACCESS(ALL)
TSS ADD(owningacid) CASECAUT(TSS)
TSS ADD(USER01) CASECAUT(TSS) ACC(ALL)
TSS ADD(owningacid) SDSF(GROUP)
TSS PER(USER01) SDSF(GROUP) ACC(ALL)
TSS CREATE(USER02) NAME('USER02 ') TYPE(SCA) PASS(USER02)
TSS ADDTO(USER02) TSOLPROC(procname)
TSS ADDTO(USER02) TSOLACCT(nnnnnnnnn)
TSS ADDTO(USER02) FACILITY(ALL)
TSS ADDTO(USER02) NOVOLCHK NORESCHK NODSNCHK NOSUBCHK NOLCFCHK
TSS ADMIN(USER02) MISC1(ALL) MISC2(ALL) MISC3(ALL) MISC4(ALL)
TSS ADMIN(USER02) MISC5(ALL) MISC7(ALL) MISC8(ALL) MISC9(ALL)
TSS ADMIN(USER02) ACID(ALL) FAC(ALL) DATA(ALL,PASSWORD)
TSS ADMIN(USER02) RESOURCE(ALL) ACCESS(ALL)
TSS ADD(USER02) CASECAUT(TSS) ACC(ALL)
TSS PER(USER02) SDSF(GROUP) ACC(ALL)
/*

 

Additional Information

STIG ID - BTSS0083: Document Use of NO***CHK Attributes