RACF z/OSMF 2.2 IZUWMSEC

Document ID : KB000011634
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

How to convert the RACF z/OSMF 2.2 IZUWMSEC job to Top Secret Commands.

Environment:
z/OSMF 2.2
Answer:
//IZUWMSEC JOB MSGCLASS=C,MSGLEVEL=(1,1),USER=XXXXXXX,NOTIFY=XXXXXXX            
//STEP1  EXEC PGM=IKJEFT01,DYNAMNBR=99                                          
//SYSPRINT DD SYSOUT=*                                                          
//SYSTSPRT DD SYSOUT=*                                                          
//SYSTSIN  DD * 
/* */ /* Begin "Workload Management" Setup */ /* */ /* Define Workload Management facility */ /* The following commented command is to be issued only if the */ /* profile does not exist It normally would have been created */ /* during z/OS setup */ /* RDEFINE FACILITY MVSADMIN.WLM.POLICY UACC(NONE) */ */

TSS ADD(dept) IBMFAC(MVSADMIN) /* Permit the Workload Management group PERMIT MVSADMIN.WLM.POLICY CLASS(FACILITY) ID(WLMGRP) ACCESS(UPDATE)
NOTE: You cannot permit to a GROUP so you can create a profile and permit IBMFAC(MVSADMIN) ACCESS(UPDATE) /* Permit the started task userid USERID */ PERMIT MVSADMIN.WLM.POLICY CLASS(FACILITY) ID(IZUSVR) ACCESS(READ)

TSS PERMIT(IZUSVR) IBMFAC(MVSADMIN.WLM.POLICY) ACCESS(READ) /* Make changes effective */ SETROPTS RACLIST(FACILITY) REFRESH /* Profile Definitions for Workload Management */ RDEFINE ZMFAPLA + IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.VIEW + UACC(NONE) RDEFINE ZMFAPLA + IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.MODIFY + UACC(NONE) RDEFINE ZMFAPLA + IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.INSTALL + UACC(NONE)

TSS ADD(dept) ZMFAPLA(IZUDFLT) if not already done /* */ /* Begin zOSMF User Role Setup */ /* */ /* Permit definitions for Workload Management */ PERMIT IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.VIEW + CLASS(ZMFAPLA) ID(IZUUSER) ACCESS(READ)
TSS PERMIT(IZUDFLT) ZMFAPLA(IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.VIEW) ACCESS(READ)
                                                                                
 /*                                                                */           
 /*  End zOSMF User Role Setup                                     */           
 /*                                                                */           
   /*   Permit definitions for Workload Management                   */           
 PERMIT IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.VIEW +            
   CLASS(ZMFAPLA) ID(IZUUSER) ACCESS(READ)

TSS PERMIT(IZUUSER) ZMFAPLA(IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.VIEW) ACCESS(READ)
                                                                                
                                                                                
 /*                                                                */           
 /*  End zOSMF User Role Setup                                     */           
 /*                                                                */           
                                                                                
 /*                                                                */           
 /*   Begin zOSMF Administrator Role Setup                         */           
 /*                                                                */           
 /*   Permit definitions for Workload Management                   */           
 PERMIT IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.VIEW +            
   CLASS(ZMFAPLA) ID(IZUADMIN) ACCESS(READ)                                     
 PERMIT +                                                                       
   IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.MODIFY +               
   CLASS(ZMFAPLA) ID(IZUADMIN) ACCESS(READ)                                     
 PERMIT +                                                                       
   IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.INSTALL +              
   CLASS(ZMFAPLA) ID(IZUADMIN) ACCESS(READ)     

TSS PERMIT(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.VIEW) ACCESS(READ)
TSS PERMIT(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.MODIFY) ACCESS(READ)
TSS PERMIT(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF.WORKLOAD_MANAGEMENT.WORKLOAD_MANAGEMENT.INSTALL) ACCESS(READ)
                                
                                                                                
 /*   Permit definitions for Workflow                              */           
 PERMIT IZUDFLT.ZOSMF.WORKFLOW.WORKFLOWS CLASS(ZMFAPLA) +                       
   ID(IZUADMIN) ACCESS(READ)    

TSS PERMIT(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF.WORKFLOW.WORKFLOWS) ACCESS(READ)                                   

       
                                                                                
 /*                                                                */           
 /*  End zOSMF Administrator Role Setup                            */           
 /*                                                                */           
                                                                                
 /* Need to REFRESH these classes for Roles                        */           
 SETROPTS RACLIST(ZMFAPLA) REFRESH                                              
                                                                                
 /*                                                                */           
 /*  End "Workload Management" Setup                               */           
 /*                                                                */           
                                                                                
/*