Creating a started task user

Create a dedicated started task control (STC) user under which the BMC AMI Security Policy Manager started task will run. Create the STC user ID with the following characteristics:

  • TSO ID that is less than eight characters
  • PROTECTED parameter
  • OMVS segment
  • Access to the database directory that you created in Reviewing-product-configuration


Related topic

Installation-overview

Additionally, grant the following permissions to the STC user for 

Security Policy Manager

 to have full functionality:

  • CLASS OPERCMDS - MVS.MCSOPER.* (READ)
  • CLASS OPERCMDS - MVS.DISPLAY.* (READ)
  • CLASS MQCMDS - \[MQsubsystemName\].Display.** (READ)
  • CLASS MQCMDS - \[MQSubsystemName\].Security.** (READ)

With these authorities, the started task can initialize without security issues. If you encounter access errors on startup, contact BMC Support.

Where to go from here

After you create a started task user, define the checkpoint data set.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*