Create site security data set


Default global security parameters, resource class properties, and product-specific resource definitions are distributed in the BBACTDEF data set. You cannot customize these defaults. To create your own customized security for BMC Discovery for z/OS product resources that are installed at your site, you must first define a security data set with the BBSECURE DD statement in the CAS and PAS started task procedures.

Note

The same data set name must be specified in the BBSECURE DD statement for both procedures. 

For more information about how to set up security and use the Plex Manager security views to customize security at your site, see Managing security for BMC AMI Ops products.

To create a BBSECURE data set

  1. Create a data set with the following DCB characteristics:

    • RECFM=FB
    • LRECL=80
    • BLKSIZE= any multiple of 80

    Use the same hilevel qualifier for this data set that you used for your target libraries during the installation process.

    Note

    If you use the ISPF Data Set Utility, do not specify the PACK option. BMC Discovery for z/OS product site data sets cannot be packed when allocated. 

  2. In the CAS started task procedure, specify the name of the data set that you created on the DSN parameter of the BBSECURE DD statement (seeCreate the coordinating address space (CAS) and RTCS startup procedures).

  3. In each PAS started task procedure, specify the name of the data set that you created on the DSN parameter of the BBSECURE DD statement (seeCreate the Discovery agent product address space (PAS) start procedure).

    Note

    A USS UID must be defined in IBM RACF with BPX.SUPERUSER (root authority) and a relationship must be established between the USS user ID and the PAS user ID. 


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*