This topic explains how to create a new RACF resource class. Performing this task is not necessary if the predefined RACF FACILITY class is appropriate for all DBC resource definitions.
Important
This topic provides general instructions. Your site might have additional considerations. BMC recommends consulting your security administrator when creating your SAF resource class.
To update the RACF resource class descriptor table (ICHRRCDE)
Code the ICHERCDE macro for each required resource class.
TITLE 'RACF RESOURCE CLASS DESCRIPTOR TABLE - ICHRRCDE' * class ICHERCDE CLASS=class, X ID=id, X POSIT=posit, X FIRST=ANY, X OTHER=ANY, X MAXLNTH=44, (or larger, if necessary) X RACLIST=ALLOWED, X OPER=NO END
Assemble the source and link edit the resulting object module to replace the current ICHRRCDE load module.
To update the RACF router table (ICHRFR01)
Code the ICHRFRTB macro for each required resource class.
TITLE 'RACF ROUTER TABLE - ICHRFR01' * class ICHRFRTB CLASS=class, X ACTION=RACF * ICHRFRTB TYPE=END * END
Assemble the source and link edit the resulting object module to replace the current ICHRFR01 load module.
If necessary to activate the RACF table changes, perform an IPL of the system.
Issue the following RACF command for each new resource class:
SETROPTS CLASSACT(class)
(optional) If you use generic profiles, issue the following RACF commands for each new resource class: