Procedure for setting the READ permission or the UPDATE permission for the RACF profile to the user

Business Continuity Manager Installation and Configuration Guide

Version

9.8.8

File Size

1.2 MB

Audience

anonymous

Part Number

MK-95HC104-42

To set the READ permission or the UPDATE permission for profiles to a user account:

For profile-name, specify one of the profiles defined in the FACILITY class in accordance with Setting basic access control functions or Setting security when the extended access control function is installed.

Activate the RACF FACILITY class.
```
SETROPTS CLASSACT(FACILITY)
```
Define the profile-name profile for the FACILITY class.
```
RDEFINE FACILITY profile-name UACC(NONE)
```
Add the READ permission for the defined profile to the user account (except in the case of the profile for editing the license information dataset).
```
PERMIT profile-name CLASS(FACILITY) ID(user-ID) ACCESS(READ)
```
In the case of the profile for editing the license information dataset, add the UPDATE permission.
```
PERMIT STGADMIN.YKA.BCM.LICENSE CLASS(FACILITY) ID(user-ID) ACCESS(UPDATE)
```

If you want to improve the execution performance of Business Continuity Manager, we recommend that you enable the RACLIST function (in-storage profiles) for the FACILITY class.

Execute one of the following commands to enable the RACLIST function.

If the FACILITY class has not been activated by RACLIST:

SETROPTS RACLIST(FACILITY)

If the FACILITY class has already been activated by RACLIST:

SETROPTS RACLIST(FACILITY) REFRESH

For details about how to activate the RACF FACILITY class, how to define a profile, and how to assign permissions for profiles to user accounts, see the IBM manual Security Server RACF Security Administrator's Guide.