How to Set Up Security for CA CSM with CA ACF2 for z/OS › How to Set Up User Security › Example: Set Up Security for Restricted Users

Example: Set Up Security for Restricted Users

You want to grant the user, MSMUSR3, access to the following actions only:

• Download product packages.
• Install product packages that are downloaded outside of CA CSM.
• Migrate an existing SMP/E environment to CA CSM.
• Remove knowledge of an SMP/E environment from CA CSM.
• Create and deploy their own deployments.
• Create and maintain remote systems within the system registry, including profile information.
• Implement prepared configurations on remote systems.

Issue the following CA ACF2 for z/OS commands:

SET R(MSM)
COMPILE STORE
$KEY(LOGON) TYPE(MSM)
UID(*****MSMUSR3)                        SERVICE(READ)   ALLOW

SET R(MSM)
COMPILE STORE
$KEY(ADMIN) TYPE(MSM)
SETTINGS.USER.-      UID(*****MSMUSR3)   SERVICE(READ)   ALLOW

SET R(MSM)
COMPILE STORE
$KEY(SC) TYPE(MSM)
@ACTION.INSTPKG.-    UID(*****MSMUSR3)   SERVICE(READ)   ALLOW

SET R(MSM)
COMPILE STORE
$KEY(SMPE) TYPE(MSM)
@ACTION.MIGRATE.-    UID(*****MSMUSR3)   SERVICE(READ)   ALLOW
@ACTION.REMOVECSI.-  UID(*****MSMUSR3)   SERVICE(READ)   ALLOW

SET R(MSM)
COMPILE STORE
$KEY(SYSREG) TYPE(MSM)
                     UID(*****MSMUSR3)   SERVICE(READ)   ALLOW

SET R(MSM)
COMPILE STORE
$KEY(METHOD) TYPE(MSM)
@DISPLAY.-           UID(*****MSMUSR3)   SERVICE(READ)   ALLOW

SET R(MSM)
COMPILE STORE
$KEY(DEPLOY) TYPE(MSM)
@SELF.-              UID(*****MSMUSR3)   SERVICE(READ)   ALLOW

SET R(MSM)
COMPILE STORE
$KEY(CONFIG) TYPE(MSM)
@ACTION.IMPL         UID(*****MSMUSR3)   SERVICE(READ)   ALLOW