Setting up the Resource Access Control Facility (RACF) when linking with Replication Manager

Business Continuity Manager Installation Guide

Version
9.8.7
File Size
1.1 MB
Audience
anonymous
Part Number
MK-95HC104-41
To enable Business Continuity Manager agent communications, set an environment for the security program (RACF).

To enable use of UNIX services, use the RACF command from TSO/E to define the management user and management group IDs held by the OMVS segment in the RACF STARTED class of the Business Continuity Manager agent cataloged procedure for startup. The following is an example of using the TSO/E command with the STARTED class:

->SETROPTS GENERIC(STARTED)
->RDEFINE STARTED YKAGENT.* STDATA(USER(user-ID) GROUP(group-ID))
->SETROPTS RACLIST(STARTED) REFRESH

To start Business Continuity Manager agent, you need to define one of the following profiles in the RACF FACILITY class, and then grant the READ permission for the defined profile to the administrator user ID:

The profiles for which READ permissions are granted to the Business Continuity Manager agent vary depending on whether the Business Continuity Manager agent is started in monitor mode or in edit mode. For details about these startup modes, see Details of initialization parameters.

If the Business Continuity Manager agent is started in monitor mode, grant READ permissions for the following profile:

  • STGADMIN.YKA.BCM.YKQUERY profile

If the Business Continuity Manager agent is started in edit mode, grant READ permissions for the following profile:

  • STGADMIN.YKA.BCM.COMMANDS profile

Following is an example of using the TSO/E command with the FACILITY class:

->SETROPTS CLASSACT(FACILITY)
->RDEFINE FACILITY STGADMIN.YKA.BCM.YKQUERY UACC(NONE)
->PERMIT STGADMIN.YKA.BCM.YKQUERY CLASS(FACILITY) ID(user-ID) ACCESS(READ)

For details, see Setting security for the environment configuration commands in section Setting the security.