Skip to Content

Group commands

The grouping method is a RACF concept that allows you to define one or more commands in a group and grant the same level of access to all of the commands.

The two classes that are required to group commands must be defined to RACF in the resource class descriptor table (CDT) and the RACF router table. Definition in the CDT is accomplished through the RACF resource class macro, ICHERCDE. Definition in the RACF router table is accomplished through the ICHRFRTB macro.

Related topic

Defining-RACF-classes

See the IBM manual, Z/OS Security Server RACF Macros and Interface, for details on these macros.

If you want to group commands, use the macros that are shown in the following figure as a sample for defining the necessary classes to the CDT.

ETA#CIMS ICHERCDE CLASS=class1, <--site defined
 ID=nnn,          <--site defined
 POSIT=nn,        <--site defined
 GROUP=class2,    <--site defined
 MAXLNTH=246,
 RACLIST=ALLOWED,
 FIRST=ANY,
 OTHER=ANY
ETA#DIMS ICHERCDE CLASS=class2, <--site defined
 ID=nnn,          <--site defined
 POSIT=nn,        <--site defined
 MEMBER=class1,   <--site defined
 MAXLNTH=246,
 RACLIST=ALLOWED,
 FIRST=ANY,
 OTHER=ANY

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Extended Terminal Assist for IMS 3.8