Portal | Manuals | References | Downloads | Info | Programs | JCLs | Mainframe wiki | Quick Ref
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Profile Log in to check your private messages Log in
 
How to give surrogate access to an id [RACF related question

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics
View previous topic :: :: View next topic  
Author Message
pravin madoori

New User


Joined: 29 Jan 2007
Posts: 25
Location: Hyderabad

PostPosted: Mon Jan 29, 2007 12:24 pm    Post subject: How to give surrogate access to an id [RACF related question
Reply with quote

Let there is an administrator RACF id [ say XYZ] for MVS system. I want to give surrogate access authority to ABC id for XYZ id. How this can be done. What is the command.

Can I delete this surrogate access with "Rdelete" command.


Can above thins be done through CLAS. :?:
Back to top
View user's profile Send private message

dick scherrer

Site Director


Joined: 23 Nov 2006
Posts: 19270
Location: Inside the Matrix

PostPosted: Mon Jan 29, 2007 9:57 pm    Post subject:
Reply with quote

Hellp,

Talk with your security department.

What will be needed (if your organization permits) is new rules/permissions for the id(s) in question. In some sites a user may give others permission, but cannot take permissions. If your site permits, the "new" permissions will need to be added to the id being granted the additional access.
Back to top
View user's profile Send private message
cpuhawg

Active User


Joined: 14 Jun 2006
Posts: 331
Location: Jacksonville, FL

PostPosted: Mon Jan 29, 2007 11:30 pm    Post subject: Re: How to give surrogate access to an id [RACF related ques
Reply with quote

If your shop uses RACF, you can use the following commands as long as the USERID issuing the RACF commands has the SPECIAL attribute on their userid:

Code:

RDEF SURROGAT XYZ.SUBMIT UACC(NONE) OWNER(SYSADM)       
PE   XYZ.SUBMIT CLASS(SURROGAT) ID(ABC) ACCESS(READ)   
SETROPTS RACLIST (SURROGAT) REFRESH                     


This change will allow user ABC to submit batch jobs with a USER=XYZ in the job card.
Back to top
View user's profile Send private message
pravin madoori

New User


Joined: 29 Jan 2007
Posts: 25
Location: Hyderabad

PostPosted: Tue Feb 06, 2007 11:05 am    Post subject: got the solution.
Reply with quote

Dick, thank you for your suggestion.
cpuhawg, thank you for giving solution.

I tried it another way also.
From VM, CLAS command, it can be done.
Options are,
option 2 then 9 then id XYZ , then option 3 "Add User IDs to the access list [ABC]",lets us add a single surrogate. Make sure you use that option and NOT 1.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts JES2 EXIT 6 QUESTION Randy Horowitz All Other Mainframe Topics 30 Tue Feb 06, 2018 5:47 pm
No new posts RACF - Sub groups - how they work? vasanthz JCL & VSAM 1 Wed Jan 10, 2018 6:44 am
No new posts question about dfsms management clas... Hervey Martinez IBM Tools 0 Tue Oct 10, 2017 6:19 pm
No new posts User access certification In Mainfram... Virendra Shambharkar All Other Mainframe Topics 4 Tue Oct 03, 2017 12:32 pm
No new posts how to see when the last read access ... Mike 1304 DB2 1 Tue Sep 12, 2017 7:52 pm

Facebook
Back to Top
 
Job Vacancies | Forum Rules | Bookmarks | Subscriptions | FAQ | Polls | Contact Us