Setting up the security for BCM Monitor

Business Continuity Manager Installation Guide

Version
9.8.7
File Size
1.1 MB
Audience
anonymous
Part Number
MK-95HC104-41

This section explains how to set up the security for BCM Monitor.

Settings to start BCM Monitor by using the START command

To start BCM Monitor by using the START command, define the appropriate user ID and group ID in the RACF STARTED class of the cataloged procedure for startup.

To start BCM Monitor by using a batch job, you do not need to configure the following settings.

The following is an example of using the TSO/E command with the STARTED class:

->SETROPTS GENERIC(STARTED)
->RDEFINE STARTED YKBCMMON.* STDATA(USER(user-ID) GROUP(group-ID)) 
->SETROPTS RACLIST(STARTED) REFRESH

Settings to use CLI commands in BCM Monitor

BCM Monitor uses a Business Continuity Manager CLI command to monitor copy groups. To use the CLI command, you need to define one of the following profiles in the RACF FACILITY class, and then grant the READ permission for the defined profile to the previously defined user ID or group ID.

If any of the following conditions is met for the BCM Monitor YKMONCG file, you need to grant the READ permission to the STGADMIN.YKA.BCM.COMMANDS profile:

  • DELETE, MAKE, RESYNC, or SUSPEND for the ACTION parameter
  • ADJUST as the startup action for the CGSTARTUPSTATUS parameter
  • DUPLEX as the startup status for the CGSTARTUPSTATUS parameter of ShadowImage when NOCANCEL is not specified

In other cases, grant the READ permission to the STGADMIN.YKA.BCM.YKQUERY profile.

The following is an example of using the TSO/E command with the FACILITY class:

->SETROPTS CLASSACT(FACILITY)
->RDEFINE FACILITY STGADMIN.YKA.BCM.COMMANDS UACC(NONE)
->PERMIT STGADMIN.YKA.BCM.COMMANDS CLASS(FACILITY) ID(user-ID) ACCESS(READ)