Previous Topic: Set Up SCS Address Space Security in CA ACF2 for z/OSNext Topic: Set Up SCS Address Space Security in IBM RACF


Set Up SCS Address Space Security in CA Top Secret for z/OS

If you are using CA Top Secret for z/OS, set up security in the SCS address space.

Follow these steps:

  1. Add the resource class to the RDT:
    TSS ADDTO(RDT) RESCLASS(CAMSM) ATTR(MASK) MAXLEN(246)
    TSS REPL(RDT) RESCLASS(CAMSM)
                     ACLST(READ=4000,UPDATE=8000,CONTROL=0400,NONE=0000)
                     DEFACC(READ)
    
  2. Create a CA CSM departmental ACID:
    TSS CREATE(MSMDPT) NAME('CA CSM Department') TYPE(USER)
    
  3. Define the resource profiles within the CAMSM class:
    TSS ADDTO(MSMDPT) CAMSM(SCSAS.CONNECT)
    
  4. Create a CA Top Secret for z/OS profile.
    TSS CREATE(SCSPRF1) NAME('CA CSM SCS AS PROFILE')   
    DEPT(MSMDPT)   TYPE(PROFILE)
    
  5. Permit the resource to access the profile:
    TSS PERMIT(SCSPRF1) CAMSM(SCSAS.CONNECT)   ACCESS(READ)
    
  6. Assign the profile to the ACID:
    TSS ADDTO(userid) PROFILE(SCSPRF1)    
    
    userid

    Specifies the user ID assigned to the SCS address space.