Can TPX provide a user's session list / applications based on the user's RACF group?

Products

• TPX - Session Management

Issue/Introduction

This can be accomplished by 'user level' profile selection from RACF.
The user's session-list can be built from the RACF group names.

Environment

Release: 5.4
Component: TPX for Z/OS

Resolution

TPX has a 'built in' function to assign profiles to users based on RACF groups.
You do NOT need any custom code in the TPXUSNSF exit for this functionality.
This exit is pre-packaged with this facility.

Sample Implementation procedure:

Assume USERA and USERB belong to RACFGRP1 and USERC belongs to RACFGRP2 in RACF.

Setup:

• This 'built in' function only applies for full dynamic or save-dynamic TPX users. In SMRT 5 you must allow dynamic user logons.

  * Dynamic Users Allowed:  Y 
  * Save Dynamic Users:     N  for full dynamic users or 
  * Save Dynamic Users:     Y  for save-dynamic users to allow self-admin 

• In SMRT option 1 define

  Load profiles at startup: Y 

• In SMRT option 9 define

   * Security System:        RACF  (SAF is recommended)
   * Profile Selection:      USER       

• Define TPX profiles RACFGRP1 and RACFGRP2 with the sessions for the different RACF groups.
  
  
• TPX must include a TPXUSNSF exit in the loadlib which returns with RC=12 from the 'getprofile call'.
  You can use the standard TPXUSNSF exit module delivered in the loadlib at installation.
  
  
• Restart TPX

If USERA now logs on TPX automatically assigns the RACF group name RACFGRP1 from the RACF ACEE and adds this profile to USERA.

Similarly, TPX assigns USERC to profile RACFGRP2 automatically.