MVScope Granular Security

MVScope Granular Security is an optional feature that prevents a user from mapping a program when they don’t have read access to the program library dataset. This feature provides an additional layer of security that works on top of the standard MainView security.

You can turn this feature on by specifying MSCGSC=Y in the PAS JCL input parameters. To enable this feature, you must add the BBREXX dataset to the system REXXLIB concatenation in the AXRxx parmlib member.

For example, the following AXRxx parmlib command can be used to add the SYS1.BMC.MAINVIEW.BBREXX dataset to the REXXLIB concatenation:

The AXR SYSREXX REXXLIB modify command can be used to verify whether the BBREXX dataset is part of the REXXLIB concatenation:

When the feature is turned on, you may see a Userid read access error message on the MSMONSET view while running the MVScope monitor command (see the MSMONSET view with userid read access error figure). If you get the Userid read access error message, the PAS log will contain the BBDDM039I messages, like the following, to indicate which dataset the Userid needs read access to:

MSMONSET view with Userid read access error