Authorizing the BBI-SS PAS for DB2 targets

Use the following procedures to GRANT authorization to the MainView for DB2 BBI-SS PAS for DB2 targets.

To issue trace control commands and capture data through the DB2 Instrumentation Facility Interface (IFI), the BBI-SS PAS must be GRANTed authorization. In addition, to issue DB2 commands from MainView for DB2, you must GRANT the privileges that are required for the types of DB2 commands that you want to issue from the BBI-SS PAS.

To access certain IFCID records, a DB2 Plan is required. This plan must be bound and authorized for each DB2 target. For more information, see Db2 target system considerations.

To GRANT DB2 authorization to the MainView for DB2 BBI-SS PAS

Execute the following SQL statement:

GRANT TRACE,monitor1,monitor2,DISPLAY TO authid;

Variable

Description

monitor1/monitor2

List the system/database privileges that you require:

Note

The following actions require SYSADM, SYSOPR, or SYSCTRL authority:

Canceling a thread in the DUSER or USERS full-screen service
Using a line command on any view
Issuing DB2 commands in the BBI log

System privileges:
- RECOVER
- STOPALL
- STOSPACE
- SYSADM
- SYSOPR
- SYSCTRL
Database privileges:
- DBADM ON DATABASE
- DISPLAYDB ON DATABASE
- STARTDB ON DATABASE
- STOPDB ON DATABASE

authid

Authorization ID

The authorization ID and how it is determined depends on the access security system that you are using. The following rules apply:

If no security management system is installed or if it is active, specify the BBI-SS PAS ID.
If the security management system is active and the BBI-SS PAS is run as a job, specify the user ID of the job.
You can establish this user ID in one of the following ways:
- RACF
  Add the USER parameter to the JOB statement.
- CA-ACF2
  Add a /*LOGONID statement after the JOB statement.
If security is active and the BBI-SS PAS is run as a Started Task, specify one of the following:
- RACF
  This value is specified in the security system’s Started Procedure Table (ICHRIN03) for the BBI-SS PAS procedure.
- CA-ACF2
  A /*LOGONID card can be added to the BBI-SS PAS startup procedure.
Note

You can display the active authorization ID by starting the BBI-SS PAS and issuing the DB2 command:
-DIS THD(*)
The authorization ID is displayed in the AUTHID column for the active BBI-SS PAS connection.

CA-TOP SECRET is capable of overriding the authorization ID with either nonprintable characters, or the word *BYPASS*.

If an override occurs, take the following steps:

Issue the following CA-TOP SECRET commands to define the BBI-SS PAS ACID to CA-TOP SECRET.
Note

The ACID is the BBI-SS PAS authorization ID to DB2.
```
TSS CREATE (X) FACILITY(STC) *NOPW* DEPT(ZZZ)
TSS ADD(X)
TSS ADD(STC) PROC(Y) ACID(X)
```
Variable
Description
X
Started task name
Y
Step or job name
Perform the GRANT authorizations that were specified in To GRANT DB2 authorization to the MainView for DB2 BBI-SS PAS.
Consult your security administrator to determine the authorization procedures for your particular security system.

Related topic

Customizing after installation

Variable	Description
X	Started task name
Y	Step or job name

Authorizing the BBI-SS PAS for DB2 targets

To GRANT DB2 authorization to the MainView for DB2 BBI-SS PAS

Comments