RACF translation to ACF2 OPERCMDS class
search cancel

RACF translation to ACF2 OPERCMDS class

book

Article ID: 273435

calendar_today

Updated On:

Products

ACF2 - z/OS

Issue/Introduction

Translation needed from RACF to ACF2

z/OS Commands

CANCEL jobname
CANCEL U=tsoid
RESET jobname,QUIESCE
RESET jobname,RESUME

 

Access rights (RACF)

RDEFINE OPERCMDS MVS.CANCEL.JOB.* UACC(NONE)
RDEFINE OPERCMDS MVS.CANCEL.TSU.* UACC(NONE)
RDEFINE OPERCMDS MVS.RESET UACC(NONE)
RDEFINE OPERCMDS MVS.MCSOPER..consname UACC(NONE)

PERMIT MVS.CANCEL.JOB.* CLASS(OPERCMDS) ACCESS(UPDATE) ID(finsrid)
PERMIT MVS.CANCEL.JOB.* CLASS(OPERCMDS) ACCESS(UPDATE) ID(fimagid)
PERMIT MVS.CANCEL.TSU.* CLASS(OPERCMDS) ACCESS(UPDATE) ID(fimsrid)
PERMIT MVS.CANCEL.TSU.* CLASS(OPERCMDS) ACCESS(UPDATE) ID(fimagid)
PERMIT MVS.RESET CLASS(OPERCMDS) ACCESS(UPDATE) ID(fimsrid)
PERMIT MVS.RESET CLASS(OPERCMDS) ACCESS(UPDATE) ID(fimagid)
PERMIT MVS.MCSOPER.consname CLASS(OPERCMDS) ACCESS(READ) ID(fimsrid)
PERMIT MVS.MCSOPER.consname CLASS(OPERCMDS) ACCESS(READ) ID(fimagid)

 

Environment

Release : 16.0

Resolution

The RDEFINE requests are not needed with ACF2

The default SAFDEF for OPERCMDS class is to be ignored.
You will need a SAFDEF record to activate the class if it is not already active. 

 I will supply example rules and then we can discuss any other requirements when activating OPERCMDS 

If there is a safdef for opercmds with ..
MODE(GLOBAL) RACROUTE(REQUEST=AUTH CLASS=OPERCMDS) 
there will only need to have rules written for these specific resources.


ACF
SET RESOURCE(SAF)
RECKEY MVS ADD(CANCEL.JOB.- USER(finsrid) SERVICE(UPDATE) ALLOW)
RECKEY MVS ADD(CANCEL.JOB.- USER(fimagid) SERVICE(UPDATE) ALLOW)
RECKEY MVS ADD(CANCEL.TSU.- USER(finsrid) SERVICE(UPDATE) ALLOW)
RECKEY MVS ADD(CANCEL.TSU.- USER(fimagid) SERVICE(UPDATE) ALLOW)
 
RECKEY MVS ADD(RESET USER(finsrid) SERVICE(UPDATE) ALLOW)
RECKEY MVS ADD(RESET USER(fimagid) SERVICE(UPDATE) ALLOW)

RECKEY MVS ADD(MCSOPER.- USER(finsrid) SERVICE(UPDATE) ALLOW)
RECKEY MVS ADD(MCSOPER.- USER(fimagid) SERVICE(UPDATE) ALLOW)

Here are a few links to knowledge documents that give instruction about OPERCMDS setup.

https://knowledge.broadcom.com/external/article?articleId=28218
https://knowledge.broadcom.com/external/article?articleId=26259

Items per page:
 
 
1 – 1 of 1