Convert RACF

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

What are the TSS equivalents of the RACF commands below:

//IZUDMSEC JOB MSGCLASS=C,MSGLEVEL=(1,1),USER=XXXXXXX,NOTIFY=XXXXXXX 
//STEP1 EXEC PGM=IKJEFT01,DYNAMNBR=99 
//SYSPRINT DD SYSOUT=* 
//SYSTSPRT DD SYSOUT=* 
//SYSTSIN DD * 

/* */ 
/* Begin "Software Deployment" Setup */ 
/* */ 

/* Profile Definitions for "Software Deployment" */ 
RDEFINE ZMFAPLA + 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT + 
UACC(NONE) 
RDEFINE ZMFAPLA + 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.DATA.** + 
UACC(NONE) 
RDEFINE ZMFAPLA - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
PRODUCT_INFO_FILE.RETRIEVE - 
UACC(NONE) 
RDEFINE ZMFAPLA - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
CATEGORIES.MODIFY - 
UACC(NONE) 
/* */ 
/* Begin zOSMF User Role Setup */ 
/* */ 
/* Permit definitions for Software Deployment */ 
PERMIT IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT + 
CLASS(ZMFAPLA) ID(IZUUSER) ACCESS(READ) 
PERMIT IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.DATA.** CLASS(ZMFAPLA) + 
ID(IZUUSER) ACCESS(CONTROL) 
PERMIT - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
CATEGORIES.MODIFY CLASS(ZMFAPLA) - 
ID(IZUUSER) ACCESS(READ) 

/* */ 
/* End zOSMF User Role Setup */ 
/* */ 

/* */ 
/* Begin zOSMF Administrator Role Setup */ 
/* */ 
/* Permit definitions for Software Deployment */ 
PERMIT IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT + 
CLASS(ZMFAPLA) ID(IZUADMIN) ACCESS(READ) 
PERMIT IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.DATA.** CLASS(ZMFAPLA) + 
ID(IZUADMIN) ACCESS(CONTROL) 
PERMIT - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
PRODUCT_INFO_FILE.RETRIEVE - 
CLASS(ZMFAPLA) ID(IZUADMIN) ACCESS(READ) 
PERMIT - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
CATEGORIES.MODIFY - 
CLASS(ZMFAPLA) ID(IZUADMIN) ACCESS(READ) 
/* */ 
/* End zOSMF Administrator Role Setup */ 
/* */ 

/* Need to REFRESH these classes for Roles */ 
SETROPTS RACLIST(ZMFAPLA) REFRESH 

/* */ 
/* End "Software Deployment" Setup */ 
/* */ 

Environment

Release:
Component: TSSMVS

Resolution

//IZUDMSEC JOB MSGCLASS=C,MSGLEVEL=(1,1),USER=XXXXXXX,NOTIFY=XXXXXXX 
//STEP1 EXEC PGM=IKJEFT01,DYNAMNBR=99 
//SYSPRINT DD SYSOUT=* 
//SYSTSPRT DD SYSOUT=* 
//SYSTSIN DD * 

/* */ 
/* Begin "Software Deployment" Setup */ 
/* */ 

/* Profile Definitions for "Software Deployment" */ 
RDEFINE ZMFAPLA + 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT + 
UACC(NONE) 
RDEFINE ZMFAPLA + 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.DATA.** + 
UACC(NONE) 
RDEFINE ZMFAPLA - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
PRODUCT_INFO_FILE.RETRIEVE - 
UACC(NONE) 
RDEFINE ZMFAPLA - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
CATEGORIES.MODIFY - 
UACC(NONE) 

TSS EQUIVALENT: 
TSS ADD(dept) ZMFAPLA(IZUDFLT.ZOSMF.SOFTWARE) (if not already owned) 

/* */ 
/* Begin zOSMF User Role Setup */ 
/* */ 
/* Permit definitions for Software Deployment */ 
PERMIT IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT + 
CLASS(ZMFAPLA) ID(IZUUSER) ACCESS(READ) 
PERMIT IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.DATA.** CLASS(ZMFAPLA) + 
ID(IZUUSER) ACCESS(CONTROL) 
PERMIT - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
CATEGORIES.MODIFY CLASS(ZMFAPLA) - 
ID(IZUUSER) ACCESS(READ) 


TSS EQUIVALENTS: 
TSS PERMIT(IZUUSER) ZMFAPLA(IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT) ACCESS(READ) 
TSS PERMIT(IZUUSER) ZMFAPLA(IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.DATA.) ACCESS(CONTROL) 
TSS PERMIT(IZUUSER) ZMFAPLA(IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.CATEGORIES.MODIFY) ACCESS(READ) 
TSS REFRESH(IZUUSER) JOBNAME(*) 


/* */ 
/* End zOSMF User Role Setup */ 
/* */ 

/* */ 
/* Begin zOSMF Administrator Role Setup */ 
/* */ 
/* Permit definitions for Software Deployment */ 
PERMIT IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT + 
CLASS(ZMFAPLA) ID(IZUADMIN) ACCESS(READ) 
PERMIT IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.DATA.** CLASS(ZMFAPLA) + 
ID(IZUADMIN) ACCESS(CONTROL) 
PERMIT - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
PRODUCT_INFO_FILE.RETRIEVE - 
CLASS(ZMFAPLA) ID(IZUADMIN) ACCESS(READ) 
PERMIT - 
IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.- 
CATEGORIES.MODIFY - 
CLASS(ZMFAPLA) ID(IZUADMIN) ACCESS(READ) 
/* */ 
/* End zOSMF Administrator Role Setup */ 
/* */ 

/* Need to REFRESH these classes for Roles */ 
SETROPTS RACLIST(ZMFAPLA) REFRESH 

TSS EQUIVALENTS: 
TSS PERMIT(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT) ACCESS(READ) 
TSS PERMIT(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.DATA.) ACCESS(CONTROL) 
TSS PERMIT(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.PRODUCT_INFO_FILE.RETRIEVE) ACCESS(READ) 
TSS PERMIT(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF.SOFTWARE_DEPLOYMENT.SOFTWARE_MANAGEMENT.CATEGORIES.MODIFY) ACCESS(READ) 
TSS REFRESH(IZUADMIN) JOBNAME(*) 


/* */ 
/* End "Software Deployment" Setup */ 
/* */