Space announcement We are no longer updating this version of the documentation for the infrastructure components (DBC, LGC, and NGL).  You can no longer leave comments on it. For the latest version of the documentation, see Common Mainframe Infrastructure 2022 release.

Creating a SAF resource class (optional)

This section explains how to create a new RACF resource class. Performing this task is not necessary if the predefined RACF FACILITY class is appropriate for all DBC resource definitions.

Note

This section provides general instructions. Your site might have additional considerations. BMC recommends consulting your security administrator when creating your SAF resource class.

To update the RACF resource class descriptor table (ICHRRCDE)

  1. Code the ICHERCDE macro for each required resource class. 

             TITLE 'RACF RESOURCE CLASS DESCRIPTOR TABLE - ICHRRCDE'
    *
    class    ICHERCDE CLASS=class,                                     X
             ID=id,                                                    X
             POSIT=posit,                                              X
             FIRST=ANY,                                                X
             OTHER=ANY,                                                X
             MAXLNTH=44, (or larger, if necessary)                       X
             RACLIST=ALLOWED,                                          X
             OPER=NO
             END
  2. Assemble the source and link edit the resulting object module to replace the current ICHRRCDE load module.

To update the RACF router table (ICHRFR01)

  1. Code the ICHRFRTB macro for each required resource class. 

                 TITLE 'RACF ROUTER TABLE - ICHRFR01'
       *
       class     ICHRFRTB CLASS=class,                              X
                 ACTION=RACF
       *
                 ICHRFRTB TYPE=END
       *
                 END
  2. Assemble the source and link edit the resulting object module to replace the current ICHRFR01 load module.
  3. If necessary to activate the RACF table changes, perform an IPL of the system.

  4. Issue the following RACF command for each new resource class: 

    SETROPTS CLASSACT(class)

  5. (optional) If you use generic profiles, issue the following RACF commands for each new resource class: 

    SETROPTS GENERIC(class)
    SETROPTS GENCMD(class)

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*