Understanding SAF › Defining Environments for SAF Calls (SAFDEF) › Translating SAF Access Levels

Translating SAF Access Levels

The following table shows how CA ACF2 for VM translates SAF access levels into CA ACF2 for VM service levels for resources and into data set accesses. The CA ACF2 for VM translated service levels are not hierarchical as described in the IBM External Security Interface (RACROUTE) Macro Reference Guide. This means that the CA ACF2 for VM resource rule you create must explicitly specify all appropriate service values.