Security requirements for CSF commands in CA Workload Automation ESP Edition

Document ID : KB000050009
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

This Knowledge Document describes security requirements for every CSF Command in CA Workload Automation ESP Edition.

Solution:

CSF line cmdDescriptionSAF_PROF_APPLSAF_PROF_GROUP
$AIssues a JES RELEASE command on a z/OS jobAPPLX-RGROUPX-R
$CCancels a z/OS job in JESAPPL-RGROUP-R
$CDCancels a z/OS job with a dump in JESAPPL-RGROUP-R
$CPCancels and purges a z/OS job in JESAPPL-RGROUP-R
$DDisplays the JES status of a jobAPPL-RGROUP-R
$HIssues a JES HOLD command on a z/OS jobAPPLX-RGROUPX-R
AReleases a jobAPPLX-RGROUPX-R
AAReleases an application from hold statusAPPLX-RGROUPX-R
AHSelect predefined workload from an application. Allows for ad-hoc scheduling.GROUP-UGROUP-U
ASReleases a subapplication held by CA Workload AutomationAPPLX-RGROUPX-R
BCBrowses COPYJCLGROUP-RGROUP-R
BDBrowses job documentationGROUP-RGROUP-R
BEBrowses the Event that invoked the applicationGROUP-RGROUP-R
BJBrowses the last executed JCLGROUP-RGROUP-R
BPBrowses CA Workload Automation procedureGROUP-RGROUP-R
BYBypasses a jobAPPLX-RGROUPX-R
BYRBypasses a jobAPPLX-RGROUPX-R
BYSBypasses a subapplicationAPPLX-RGROUPX-R
CCompletes a jobAPPLX-RGROUPX-R
CACompletes an application and completes all the jobs in that application. You must remove any holds or waits on the application before CA Workload Automation will complete it.APPLX-RGROUPX-R
CSCompletes an entire subapplicationAPPLX-RGROUPX-R
DDDrops all predecessor dependenciesAPPLX-RGROUPX-R
DINDisplays an info recordGROUP-RGROUP-R
DRDrops all resource dependenciesAPPLX-RGROUPX-R
ECEdits COPYJCLGROUP-UGROUP-U
EDEdits job documentationGROUP-UGROUP-U
EEEdits the Event that invoked the applicationGROUP-UGROUP-U
EJEdits the last executed JCLGROUP-UGROUP-U
EPEdits CA Workload Automation procedureGROUP-UGROUP-U
HPlaces a job into APPLHOLD statusAPPLX-RGROUPX-R
HAPlaces application in APPLHOLD statusAPPLX-RGROUPX-R
HARPlaces application in APPLHOLD statusAPPLX-RGROUPX-R
HRPlaces a job into APPLHOLD status with a reasonAPPLX-RGROUPX-R
HSPlaces subapplication into CA Workload Automation hold statusAPPLX-RGROUPX-R
IJInserts a z/OS job into the application, IJ can be issued in Application MonitorAPPL-UGROUP-U
IJAInserts a job after a selected jobAPPL-UGROUP-U
IJBInserts a job before a selected jobAPPL-UGROUP-U
IWInserts a workload object into the application, IW can be issued in Application MonitorAPPL-UGROUP-U
JCLDisplays the JESJCL output spool file for the specified job in a JES2 or JES3 environmentGROUP-RGROUP-R
JESDisplays the JESMSGLG, JESJCL, and JESYSMSG output spool files for the specified job in a JES2 or JES3 environmentGROUP-RGROUP-R
LDisplays all predecessor dependenciesGROUP-RGROUP-R
LALists the applicationAPPL-RGROUP-R
LADLists the application dump. LAD lists control blocks ADXE and ATR and the AJQE control blocks. For more information, see the Programming Guide.APPL-RGROUP-R
LIDisplays index entriesGROUP-RGROUP-R
LJDisplays step-level statisticsGROUP-RGROUP-R
LJELists detailed information about the specified jobAPPL-RGROUP-R
LJOLists all output spool files for the specified z/OS job. Individual output spool files can be viewed by issuing the S or V command on the appropriate output spool file line in the list. This applies to JES2 and JES3 environments.GROUP-RGROUP-R
LOGDisplays the JESMSGLG (job log) output spool file for the specified job in a JES2 or JES3 environmentGROUP-RGROUP-R
LRDisplays the job resourcesGROUP-RGROUP-R
LSLists subapplicationAPPL-RGROUP-R
MEModifies enqueuesGROUP-UGROUP-U
MRModifies resourcesGROUP-UGROUP-U
MSGDisplays the JESYSMSG (job message) output spool file for the specified job in a JES2 or JES3 environmentGROUP-RGROUP-R
OUTDisplays all output spool files for the specified job in a JES2 or JES3 environmentGROUP-RGROUP-R
PIssues a system STOP command on an executing z/OS job, if the job is programmed to do soAPPL-RGROUP-R
QSQuiesces a z/OS job executing on a goal mode system. Requires CA Workload Automation Service Governor EE.APPL-RGROUP-R
RResubmits or restarts a job Note:APPLX-RGROUPX-R
RDReadies a job, removing all predecessors and submit time dependenciesAPPLX-RGROUPX-R
RDSReadies a subapplicationAPPLX-RGROUPX-R
RMReruns multiple jobs in an active or complete applicationAPPLX-RGROUPX-R
RPReplies to a CA Workload Automation Agent for i5/OS messageGROUP-UGROUP-U
RQRequests a jobAPPLX-RGROUPX-R
RQSRequests a subapplicationAPPLX-RGROUPX-R
RRViews the CA Workload Automation Restart Option EE panels or the CA Workload Automation Restart Option for z/OS Schedulers restart interface panel. Use RX if you want to exclude specific steps from the range of steps you want to rerun. RX is only available for jobs whose restart manager is CA Workload Automation Restart Option EE.APPLX-RGROUPX-R
RSResumes the original service class of a z/OS job executing on a goal mode system. Requires CA Workload Automation Service Governor EE.APPL-RGROUP-R
RTResets one or more time dependenciesAPPLX-RGROUPX-R
RXViews the CA Workload Automation Restart Option EE panelsAPPLX-RGROUPX-R
SUSSets the user status field for a jobAPPL-RGROUP-R
TACompletes an application immediately. CA Workload Automation removes any holds and waits that are on the application, completes all the workload objects in the application, and completes the application.APPLX-RGROUPX-R
UBUnbypasses a bypassed jobAPPLX-RGROUPX-R
UBSCancels the bypass of a subapplicationAPPLX-RGROUPX-R
UINUpdates an info recordGROUP-UGROUP-U
URUnrequests a requested jobAPPLX-RGROUPX-R
URSCancel the requests of a subapplicationAPPLX-RGROUPX-R
UWUnwaits a job from job-ancestor wait (JANCWAIT)APPLX-RGROUPX-R
UWARemoves an application from APPLWAIT status. The application no longer waits for a previous generation of the application.APPLX-RGROUPX-R
UWSRemoves subapplication from SANCWAIT statusAPPLX-RGROUPX-R
WSelects distributed job optionsGROUP-UGROUP-U
WCCancels a PeopleSoft jobGROUP-UGROUP-U
WDWithdraws an incomplete job.APPLX-RGROUPX-R
WDSWithdraws all incomplete jobs in a subapplicationAPPLX-RGROUPX-R
WDAWithdraws all incomplete jobs in an application.APPLX-RGROUPX-R
WSFRetrieves a distributed job spool fileGROUP-RGROUP-R
XPManually expedites a job with an associated expedite policy, waiting for execution or executing. Requires CA Workload Automation Service Governor EE.APPL-RGROUP-R

Note:

  • For R, RR, RX commands, UPDATE acess is needed to resub from a different JCLLIB, user mode 12 overwrites it.

  • Conventions:

    APPL-R means READ access to ESP.APPL profile;
    APPLX-R means READ access to ESP.APPLX profile;
    APPL-U means UPDATE access to ESP.APPL profile;
    GROUP-R means READ access to ESP.GROUP profile;
    GROUPX-R means READ access to ESP.GROUPX profile;
    GROUP-U means UPDATE access to ESP.GROUP profile.