How to Set Up Security for CA CSM with IBM RACF › How to Set Up User Security › Define the CAMSM Resource Class

Define the CAMSM Resource Class

Before you can use the CA CSM resource profiles, you define the CAMSM class that contains the profiles to IBM RACF.

Note: CAMSM is the default name of the SAF resource class. Your system may use a different name depending on your CA CSM installation.

Follow these steps:

1. Issue the STEROPTS LIST command to verify that the CDT resource appears within both the CLASSACT and RACLIST list of entries.
2. Issue the following command to define the generic profile:

   RDEFINE CDT CAMSM UACC(NONE) CDTINFO(GENERIC,MAXLENGTH(246) POSIT(nnn) OTHER(ALPHA,NATIONAL,NUMERIC,SPECIAL) RACLIST(ALLOWED))
   

   nnn

   Defines a posit number that does not conflict with IBM reserved values.

   Note: For more information about posit numbers, see the IBM Server RACF Command Language Reference.

   The generic profile is defined.

3. Issue the following commands to finalize the changes:

   SETROPTS RACLIST(CDT) REFRESH
   SETROPTS GENERIC(CAMSM) RACLIST(CAMSM) CLASSACT(CAMSM)
   

   The changes take effect and the CAMSM resource class is defined to IBM RACF.

Note: You deny or grant access to CA CSM using resource profiles.