DWC (Dynamic Workload Console ) TMEADMIN security rules for TIVOLI administrators

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

Resource Class TMEADMIN rules are used for each Tivoli administrator who performs DWC operations.

Environment

Product: CA ACF2

Component: ACF2MS

Resolution

In the TMEADMIN class, the following string defines a unique user ID for each Tivoli administrator who performs Dynamic Workload Console operations: userid@hostname. 

For example, for a user with the identifier "USER" on host "HOST" the user ID is USER@HOST.

The Resource Class TMEADMIN defaults to TYPE(SAF). Change the TYPE from SAF to TYPE(TME). Use these commands to set up a new  CLASMAP:

ACF
SET CONTROL(GSO)
INSERT CLASMAP.TMEADMIN ENTITYLN(246) RESOURCE(TMEADMIN) RSRCTYPE(TME)
F ACF2,REFRESH(CLASMAP) 

Sample RECKEY commands to add the Resource rule:

SET RESOURCE(TME)
RECKEY USER@HOST ADD( UID(uid string) ALLOW)
RECKEY USER@HOST ADD($USERDATA(USER))