Portal | Manuals | References | Downloads | Info | Programs | JCLs | Master the Mainframes
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Usergroups Profile Log in to check your private messages Log in
 

 

How to give surrogate access to an id [RACF related question

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics
View previous topic :: :: View next topic  
Author Message
pravin madoori

New User


Joined: 29 Jan 2007
Posts: 25
Location: Hyderabad

PostPosted: Mon Jan 29, 2007 12:24 pm    Post subject: How to give surrogate access to an id [RACF related question
Reply with quote

Let there is an administrator RACF id [ say XYZ] for MVS system. I want to give surrogate access authority to ABC id for XYZ id. How this can be done. What is the command.

Can I delete this surrogate access with "Rdelete" command.


Can above thins be done through CLAS. :?:
Back to top
View user's profile Send private message

dick scherrer

Site Director


Joined: 23 Nov 2006
Posts: 19270
Location: Inside the Matrix

PostPosted: Mon Jan 29, 2007 9:57 pm    Post subject:
Reply with quote

Hellp,

Talk with your security department.

What will be needed (if your organization permits) is new rules/permissions for the id(s) in question. In some sites a user may give others permission, but cannot take permissions. If your site permits, the "new" permissions will need to be added to the id being granted the additional access.
Back to top
View user's profile Send private message
cpuhawg

Active User


Joined: 14 Jun 2006
Posts: 331
Location: Jacksonville, FL

PostPosted: Mon Jan 29, 2007 11:30 pm    Post subject: Re: How to give surrogate access to an id [RACF related ques
Reply with quote

If your shop uses RACF, you can use the following commands as long as the USERID issuing the RACF commands has the SPECIAL attribute on their userid:

Code:

RDEF SURROGAT XYZ.SUBMIT UACC(NONE) OWNER(SYSADM)       
PE   XYZ.SUBMIT CLASS(SURROGAT) ID(ABC) ACCESS(READ)   
SETROPTS RACLIST (SURROGAT) REFRESH                     


This change will allow user ABC to submit batch jobs with a USER=XYZ in the job card.
Back to top
View user's profile Send private message
pravin madoori

New User


Joined: 29 Jan 2007
Posts: 25
Location: Hyderabad

PostPosted: Tue Feb 06, 2007 11:05 am    Post subject: got the solution.
Reply with quote

Dick, thank you for your suggestion.
cpuhawg, thank you for giving solution.

I tried it another way also.
From VM, CLAS command, it can be done.
Options are,
option 2 then 9 then id XYZ , then option 3 "Add User IDs to the access list [ABC]",lets us add a single surrogate. Make sure you use that option and NOT 1.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts IMS DC screen Access sivasaras IMS DB/DC 3 Fri Nov 18, 2016 6:38 pm
No new posts Access SQLCA fields inside a stored p... gangapd DB2 4 Thu Oct 27, 2016 10:20 am
No new posts RACF profile access vasanthz All Other Mainframe Topics 11 Fri Sep 23, 2016 5:51 am
No new posts Fault Analyzer - listings question. egrove IBM Tools 4 Thu Aug 11, 2016 5:31 pm
No new posts dataset copy question - REPRO or some... atulxp TSO/ISPF 2 Wed Aug 03, 2016 10:56 pm


Facebook
Back to Top
 
Mainframe Wiki | Forum Rules | Bookmarks | Subscriptions | FAQ | Tutorials | Contact Us