Creating a security profile

You can create a security profile by either adding a profile and assigning authorizations to the profile, or by adding a profile and copying authorizations from an existing profile into the new profile.

To create a security profile

Perform the following steps to create a security profile:

1. Type 3 on the Command line on the Administrative/Utilities Menu panel.
   The Profile Selection List panel is displayed. This panel lists all security profiles that are defined for the current profile data set.
2. Type ADD profileName on the Command line of the Profile Selection List panel and press Enter.
   The Security Profile panel is displayed. This panel lists all authorizations that are defined for the current security profile.

3. Type ADD on the Command line of the Security panel and press Enter.
   The Add Authorization Selection panel is displayed. This panel lists the current authorizations that are available for you to select for the security profile. The below fields are displayed on the Add Authorization Selection panel:

   Field	Description
   Type	The type of command to be authorized. Possible values are  ALTER CUSTOM ELEMENT INFO MVS OPER SECURITY VTAM
   Authorization	The specific subcommand to be authorized. Each component of a command can be authorized individually.
   Description	Identifies the command that is authorized.

4. To limit the available authorizations listed to those for the target subsystem or subsystems, type Y in the Limit list to target(s) field and press Enter.
   Only valid authorizations for Db2 subsystems are displayed.
   To list all available authorizations, type N in the field. Valid authorizations for Db2 subsystems are displayed.
5. To add an authorization, type S in the Act field next to the desired authorization, and press Enter.
   The authorization is removed from the Add Authorization Selection panel and is added to the Security Profile panel.
6. When you have selected all authorizations, press F3
   You are returned to the Security Profile panel.
7. (Optional) To delete an authorization, type D in the Act field next to the authorization and press Enter.
   The authorization is removed from the current profile.
8. Press F3 to exit the Security Profile panel.

To create a profile by copying an existing profile

You can create a security profile by copying an existing profile. Perform the following steps:

1. Type 3 on the Command line on the Administrative/Utilities Menu panel.
   The Profile Selection List panel is displayed. This panel lists all security profiles that are defined for the current profile data set.
2. Type ADD profileName on the Command line of the Profile Selection List panel and press Enter.
   The Security Profile panel is displayed. This panel lists all authorizations that are defined for the current security profile.
3. Type COPY on the Command line and press
   The Profile Copy panel is displayed.
4. Type S in the Act field next to the profile you want to copy into the profile you are creating, and press Enter.
   OPERTUNE copies the authorizations from the selected profile into the current profile that you are creating. The Security Profile panel is displayed.
5. To list profiles from another OPERTUNE, perform one of the following steps:
   

   • If you do not know the OPERTUNE name, type a question mark (?) in the OPERTUNE to Copy from field, and press Enter. On the Copy Target OPERTUNE Selection panel, type S in the Act field next to the OPERTUNE that you want and press Enter.

     All profiles that are in the selected OPERTUNE are displayed on the Profile Copy panel.

   • If you know the name of the OPERTUNE, type the name in the OPERTUNE to Copy from field, and press Enter.

     All profiles that are in the selected OPERTUNE are displayed on the Profile Copy panel.

6. After selecting a profile, press F3 to return to the Profile Selection List panel.
7. Press F3 to return to the Administrative/Utilities Menu panel.