Documentation for Check CTC implementation with IBM MFA in ACF2.
Release : 16.0
Additional RACF administration steps for check CTC
Last Updated: 2023-02-03
You must perform RACF® administration steps on the CTC destination for check CTC.
Define a resource profile in MFADEF class
Last Updated: 2023-02-03
You define IBM® MFA factors by creating a general resource profile for the factor name in the MFADEF class. To define a factor for check CTC, use RDEFINE to create a resource profile named FACTOR.AZFCKCTC in the MFADEF class.
Procedure
Define a resource profile in FACILITY class
Last Updated: 2023-02-03
To define authorization to execute the panels for check CTC administration, use RDEFINE to create a resource profile named IRR.RFACTOR.MFADEF.AZFCKCTC in the FACILITY class.
Procedure
Authorize access to IRR.RFACTOR.MFADEF.AZFCKCTC profile last Updated: 2023-02-03
Authorize the administrators who execute the panels to the IRR.RFACTOR.MFADEF.AZFCKCTC profile.
Procedure
Permission | Access |
READ | Able to view configuration options, but may not update, create, or delete parameters. |
UPDATE, CONTROL, ALTER | Able to create, update, delete, and view configuration options. |
Table 1. Required levels of permission |
For example:
PERMIT IRR.RFACTOR.MFADEF.AZFCKCTC ACCESS(ALTER) CLASS(FACILITY) ID(user-id)
ACF
SET RESOURCE(FAC)
RECKEY IRR ADD(RFACTOR.MFADEF.AZFCKCTC USER(adminid) SERVIC(READ,UPDATE) ALLOW)
END
SETROPTS RACLIST(FACILITY) REFRESH
F ACF2,REFRESH(FAC)