Implementing External Security with CA ACF2 › Customize Resource Class with CA ACF2

Previous Topic: How to Implement External Security with CA ACF2

Next Topic: Define Roles Based on Function for Validation

Customize Resource Class with CA ACF2

The CA OPS/MVS parameter EXTSECCLASS determines the class name that is used to make SAF calls to authorize resources. EXTSECCLASS defaults to the three-character type code FAC. FAC maps to the FACILITY resource class supplied with CA ACF2. With CA ACF2, you can create a GSO CLASMAP record to map to a different three-character type code to address your unique site requirements.

The following steps guide you through customizing CA ACF2 rules under a different resource class name.

Follow these steps:

  1. Issue the ACF command SHOW CLASMAP.

    SHOW CLASMAP verifies the three-character type CA ACF2 uses.

    Note: For more information, see the CA ACF2 for z/OS Administrator Guide.

  2. Specify this three-character resource type code on the EXTSECCLASS parameter before starting CA OPS/MVS.

You have finished customizing CA ACF2 rules under a different resource class name.