Define Datacom/AD security rules for CA 7

Products

• Datacom
• DATACOM - AD
• CA 7 Workload Automation

Issue/Introduction

This article explains how to implement external security in the Datacom/AD Multi-User (MUF) used by CA 7 Workload Automation.

CA 7 uses DBID 770 as Datacom database identifier.

Environment

z/OS

Datacom/AD

CA 7 12.x

Resolution

Datacom/AD security for CA 7 is documented in the Datacom/AD documentation in section Datacom Security in CA 7.

Add the SECURITY Datacom startup parameter once the RACF,TSS or ACF2 rules are established.

Other Security topics related to CA 7 are explained in the CA 7 documentation section Securing.

Datacom Security is activated via the following two MUF startup parameters: 

SECURITY DBDCSCI,DBDCSCQ,DBDCRCI,DBDCRCQ,DBDCRAQ 
SECURITY DBDCSSR,DBDCRSR,DBDCSQL,DBDCSQQ,DBDCRAT 

You can comment them out until you are ready to activate the Datacom Security by adding an '*' in front like this:

* SECURITY DBDCSCI,DBDCSCQ,DBDCRCI,DBCRCQ,DBDCRAQ
* SECURITY DBDCSSR,DBDCRSR,DBDCSQL,DBDCSQQ,DBDCRAT 

Then you will need the help of a Security Administrator. 

If you are an ACF2 site then review these CA 7 CAL2OPTN library members: 

• AL2ACF2D - CA ACF2 Security Definitions for CA Datacom access 
• AL2ACF2N - CA ACF2 Security Definitions for new CA 7 Commands 
• AL2ACF2S - Sample CA ACF2 Security definitions for CA 7 

If you are a RACF site then review these CA 7 CAL2OPTN library members: 

• AL2RACFD - RACF Security Definitions for CA Datacom access 
• AL2RACFN - RACF Security Definitions for new CA 7 Commands 
• AL2RACFS - RACF sample security definitions for CA 7 

If you are a TSS site then review these CA 7 CAL2OPTN library members:

• AL2TSSD - CA Top Secret Security Definitions for CA Datacom access 
• AL2TSSN - CA Top Secret Security Definitions for new CA 7 Commands 
• AL2TSSS - CA Top Secret Security Definitions for new CA 7 Commands 

Once the rules are established by your Security Administrator, you may un-comment the two MUF startup SECURITY parameters (by removing the '*' in front of the two SECURITY cards). 
 

Additional Information

See the CA 7 documentation section Secure the Datacom/AD MUF and the Datacom/DB documentation section Using External Security for Datacom.
Refer to your Security product documentation (TSS, RACF or ACF2) for any rules to add.
Also make sure you have applied CA 7 12.0 PTF RO97693 (SAMPLE SECURITY RULE UPDATES) , if you run CA 7 version 12.0 , which updates the AL2xxxxx members listed previously.