Previous Topic: Resource-Value Field Values for the IMS OptionNext Topic: External Security Section Display


Resource-Value Field Values for Other Resource Types

Values for the Resource-Value field for other resource types are listed in this section.

The following are the values for the Resource-Value field:

CATALOG

Indicates the catalog data set name that is allowed or restricted. Specify an exact data set or use an equal sign (=) at the end to specify a partial data set.

The CATALOG command calls for the CATALOG resource to validate the catalog data set name. If the catalog data set is not allowed, the catalog is not displayed.

The CATALOG command also calls for alter access when the ISC, NOISC, VLF, and NOVLF line commands are used. Calls are also made for the AL, CL, FRE, and OP line commands.

CONSOLE

Indicates the console name that is allowed or restricted. Specify an exact name or use an equal sign (=) at the end to specify a partial name.

The following commands call for the CONSOLE resource:

CONSOLE

Calls for a console name, for the RELEASE subcommand, and for the D line command.

LISTCONS

Calls for a console name, for alter access, and for the AC, D, DE, MAS, OFF, ON, and R line commands.

CPU

Indicates the CPU address that is allowed or restricted.

CPU

Calls for the CPU resource to validate the CPU address. If the CPU is not allowed, it is not displayed. The CPU command also calls for the CPU resource to validate the line commands OFF and ON.

PRISM

Calls for the CPU resource to validate the VARYOFF and VARYON line commands.

DEST

Indicates the execution or output destination that is allowed or restricted. DEST can be an exact destination, a partial destination, or one of the following:

USERID -

Specifies a destination that matches the user ID of the user.

USERID:n

Specifies a destination that starts with a portion of the user ID of the user.

USERID=

Specifies a destination that starts with the user ID of the user.

If use of the destination is allowed (the Act field value is A) and alteration is authorized (the Alt field value is YES), this destination can be used when you change the destination of a job or the selection criteria of a device. If use of the resource is allowed and alter authority is not allowed, you can see jobs associated with the destination, but you cannot use this destination when specifying a new destination for a job.

You can specify no line commands for the DEST resource. The following commands call for the DEST resource:

APPCOUTQ

Calls for the APPC initiators and transactions and for alter access to the new destination when the destination of the output file changes.

DESTID

Calls for the destination ID.

JCOPYOUT

Calls to copy the output to a new output file and for alter access to the new destination.

JHELDQUE

Calls for the destination of a job and for alter access to the new destination when the job destination is changed.

JJOBQUE

Calls for the destination of a job and for alter access to the new destination when the job destination changes.

JOBSUM

Calls for the destination of a job and for alter access to the new destination when the job destination changes.

JOUTQUE

Calls for the destination of a job and for alter access to the new destination when a job destination is changed.

LISTFILE

Calls for the destination of a file and for alter access to the new destination when the output file destination changes.

LISTINP

Calls for the destination of a job and for alter access to the new destination when the job destination changes.

OFFLOAD

Calls for the destination of a job and for alter access to the new destination when a job destination is changed.

PRINTER

Calls for the destination of a printer and for alter access to the new destination when the printer selection destination changes.

PROFILE

Calls for the destination of the profile and for alter access to the new destination when the profile selection destination changes.

PUNCH

Calls for the destination of a punch and for alter access to the new destination when the punch selection destination changes.

READERS

Calls for the destination of a reader and for alter access to the new destination when a job destination is changed.

SET

Calls for the destination of a job and for alter access to the new destination when a job destination is changed.

DEVICE

Specifies the device name for a JES line, offloader, printer, punch, or reader.

The following commands call for the DEVICE resource:

INTRDR

Calls for the device name of a reader and for alter access when a reader is changed.

LINES

Calls for the device name of a line, for alter access when a line is changed, and for the E, I, N, S, and Z line commands.

OFFLOAD

Calls for the device name of an offloader, for alter access when an offloader is changed, and for the P, S, and Z line commands.

PRINTER

Calls for the device name of a printer, for alter access when a printer is changed, and for the B, E, F, I, N, P, S, and Z line commands.

PUNCH

Calls for the device name of a punch, for alter access when a punch is changed, and for the B, E, F, I, N, P, S, and Z line commands.

READER

Calls for the device name of a reader, for alter access when a reader is changed, and for the P, S, and Z line commands.

DUMPDS

Specifies the dump data set that is allowed or restricted. Specify an exact data set or use an equal sign (=) at the end to specify a partial data set.

The DUMPDS command calls for the DUMPDS resource to validate the dump data set name. If the dump data set is not allowed, the dump data set is not displayed.

The DUMPDS command also calls for the AD, CLR, and D line commands.

EMAIL

Specifies the valid email address of users.

The following command calls to the EMAIL resource:

SENDMAIL

Initiates calls to validate the “From” email address with the SEN line command.

GROUPS

Specifies the allowed or restricted groups. Specify an exact name or use an equal sign (=) at the end to specify a partial group name.

The GROUPS command calls for the group name, for the AD and D line commands, and the ADDGRP, ADDMBR, DELGRP, and DELMBR subcommands.

JINIT

Specifies the initiator ID. Use = instead of an ID to specify all initiators. The JINIT command is the only command that uses this resource. JINIT calls for the ID of the initiator, for alter access when an initiator is changed, and for the P, S, and Z line commands.

JOBCLASS

Specifies the job class that is allowed or restricted. Values are A-Z, 0-9, $, and @. You can specify no line commands for the JOBCLASS resource.

You can use the ALT field with JOBCLASS, which works like the DEST resource described earlier in this table.

These commands call for the JOBCLASS resource:

ACTIVITY

Calls for job class data display.

APPCOUTQ

Calls for job class display and the APPC initiators and transactions data.

JINIT

Calls for job class data display.

INTRDR

Calls for job classes displayed and for alter access when a job class is changed.

JHELDQUE

Calls for the class of a job.

JINPRTY

Calls for job class data display.

JJOBQUE

Calls for the class of a job and for alter access to the new job class when the class of a job changes.

JOBCLASS

Calls for job classes displayed and for alter access when a job class is changed or the H or R line command is used.

JOBSUM

Calls for the class of a job and for alter access to the new job class when the class of a job changes.

JOUTDES

Calls for the class of a job.

JOUTQUE

Calls for the class of a job.

LINES

Calls for the class of a job when lines are active.

LISTINP

Calls for the class of a job and for alter access to the new job class when the class of a job changes.

OFFLOAD

Calls for the class of a job.

PRINTER

Calls for the class of a job when printers are active.

PUNCH

Calls for the class of a job when punches are active.

READERS

Calls for the class of a job and for alter access to the new job class when the class of a job changes.

LGSTREAM

Specifies the log stream name. The LGDRO and LGEMPTY commands use this resource with alter access to validate the log stream name.

LIBCACHE

Specifies the library cache type. Valid resource values are CAPLIB, CLISTLIB, HELPLIB, MAPLIB, MIBLIB, PANELLIB, PANELLIB and PARMLIB.

The LIBCACHE command uses this resource to look for alter access to the library type when the following line commands and subcommands are used:

When the EMPTY subcommand is used, a call is made for alter access with a resource value of ALL.

MQSVAR

Specifies the WebSphere MQ monitor variable name.

The following commands call for the MQSVAR resource:

MQMON

Calls for alter access when adding, changing, or deleting a variable definition. Makes a check for the resource value ?ADD to determine whether to display the line for adding a variable.

MQSTATES

Calls for alter access when adding, changing, or deleting a variable definition. Makes a check for the resource value ?ADD to determine whether to display the line for adding a variable.

MQTHRESH

Calls for alter access when adding, changing, or deleting a variable definition. Makes a check for the resource value ?ADD to determine whether to display the line for adding a variable.

MVSVAR

Specifies the MVS monitor variable name.

The following commands call for the MVSVAR resource:

MONITORS

Calls for alter access when adding, changing, or deleting a variable definition. Makes a check for the resource value ?ADD to determine whether to display the line for adding a variable.

STATES

Calls for alter access when adding, changing, or deleting a variable definition. Makes a check for the resource value ?ADD to determine whether to display the line for adding a variable.

THRESH

Calls for alter access when adding, changing, or deleting a variable definition. Makes a check for the resource value ?ADD to determine whether to display the line for adding a variable.

NODE

Specifies the node name.

JPATHS

Calls for the JES network paths.

NODES

Calls for the node name of a node, for alter access when a node is changed, and for the S line command.

OUTCLASS

Specifies the Output class that is allowed or restricted. Values are A-Z or 0‑9. You can specify no line commands for the OUTCLASS resource.

You can use the ALT field with OUTCLASS, which works like the JOBCLASS and DEST resources described earlier in this table.

These commands call for the OUTCLASS resource:

APPCOUTQ

Calls for a file output class and for alter access to the new output class when a file output class is changed.

COPYOUTP

Calls to copy output to a new output file and for alter access to the new destination.

JHELDQUE

Calls for a job output class and for alter access to the new output class when a file output class is changed.

JJOBQUE

Calls for a job output class and for alter access to the new output class when a file output class is changed.

JOUTDES

Calls for the class of a job.

JOUTQUE

Calls for a job output class and for alter access to the new output class when a file output class is changed.

LINES

Calls for the class of a job when lines are active.

LISTFILE

Calls for a file output class and for alter access to the new output class when a file output class is changed.

OFFLOAD

Calls for the class of a job and for alter access to the new output class when a file output class is changed.

OUTCLASS

Calls for output classes displayed and for alter access when an output class is changed.

PRINTER

Calls for the class of a job when printers are active.

PUNCH

Calls for the class of a job when punches are active.

READERS

Calls for the class of a job and for alter access to the new job class when the class of a job changes.

SET

Calls for the destination of a job and for alter access to the new destination when a job destination is changed.

PAGEDS

Specifies the Page data set that is allowed or restricted. Specify an exact data set or use an equal sign (=) at the end to specify a partial data set.

The PAGEDS command calls for the PAGEDS resource to validate the page data set name. If the page data set is not allowed, the page data set is not displayed.

The PAGEDS command also calls for the AD, D, and DR line commands.

SCHEDULE

Specifies the schedule name that is allowed or restricted. Specify an exact name or use an equal sign (=) at the end to specify a partial data set name.

The SCHEDULE command calls for:

A call is also made for read access for the name ?Add to see whether to display the line to add a schedule.

SMFDATA

Specifies the SMF record type that is allowed or restricted.

The SMFDATA command calls for alter access when, and the LOG, NOLOG, SUPRESS and NOSUPRES line commands are used.

SMFDS

Specifies the SMF data set that is allowed or restricted. Specify an exact data set or use an equal sign (=) at the end to specify a partial data set.

The SMF command calls for the SMFDS resource to validate the DU and SW line commands.

SPOOL

Specifies the last two characters of a spool volume name. The JSPOOLS command is the only command that uses this resource.

The JSPOOLS command makes a resource call to determine whether to present a line on the display that lets spool volumes be added. To authorize this line, define a resource value of XX with the S line command. If the XX resource value is not defined, you cannot add spool volumes.

Calls are also made to validate the C, FMT, P, S, and Z line commands.

STGSSID

Specifies the subsystem storage IDs.

These commands calls for the STGSSID resource:

CACHECTL

When you enter the line command:

  • CACHEON or CACHEOFF, a call is made for the SSUB line command.
  • CFWON or CFWOFF, a call is made for the SCFW line command.
  • NVSON or NVSOFF, a call is made for the SNVS line command.
CACHEDEV

When you enter the line command:

  • CACHEON or CACHEOFF, a call is made for the SDEV line command.
  • DFWON or DFWOFF, a call is made for the SDFW line command.
SYSTEM

Specifies the system name. The LISTSYS command is the only command that uses this resource. It calls for the system ID, for alter access when a system is changed, and for the E line command.

TCPVAR

Specifies the TCP/IP monitor variable name.

The following commands call for the TCPVAR resource:

TCPMON

Calls for alter access when adding, changing, or deleting a variable definition. Makes a check for the resource value ?ADD to determine whether to display the line for adding a variable.

TCPSTATE

Calls for alter access when adding, changing, or deleting a variable definition. Makes a check for the resource value ?ADD to determine whether to display the line for adding a variable.

TCPTHRSH

Calls for alter access when adding, changing, or deleting a variable definition. Makes a check for the resource value ?ADD to determine whether to display the line for adding a variable.

UNIT

Specifies the Unit device address.

The following commands call for the UNIT resource:

ALLOCAS

Calls for the ON, OFF, and FRE line commands.

ALLOCDS

Calls for the FREE line command.

DASD

Calls for the DASD device address, for alter access when volume attributes can be changed, and for the MNT, OFF, ON, and UNL line commands.

DEVPATH

Calls for the DEVPATH device number, for alter access when volume attributes can be changed, and for the line commands OFF and ON.

DEVSERV

Calls for the DEVSERV device number and for the FREE, MNT, OFF, ON, and UNL line commands.

EXTENTS

Calls for the EXTENTS device number.

SPACE

Calls for the SPACE device number.

SUBCHAN

Calls for the subchannel device number.

TAPE

Calls for the tape device address, for alter access when volume attributes can be changed, and for the MNT, OFF, ON, and UNL line commands.

UNIT

Calls for the unit device address, for alter access when volume attributes can be changed, and for the MNT, OFF, ON, and UNL line commands.

VOLSER

Calls for the volser device number.

VOLSER

Specifies the DASD volume serial numbers allowed or restricted.

The following commands call for the VOLSER resource:

ALLOCAS

Calls for the OFF, and FRE line commands.

ALLOCDS

Calls for the FREE line command.

CACHEDEV

Calls for volser name.

SDEV initiates a call to CACHEON and CACHEOFF line commands.

SDFW initiates a call to DFWON and DFWOFF line commands.

DASD

Calls for the volser of a DASD and for the MOUNT, OFF, and UNLOAD line commands.

DEVSERV

Calls for the device service volser name and for the FREE, MNT, OFF, ON, and UNL line commands.

DEVPATH

Calls for the device path volser name and for the FREE, MNT, OFF, ON, and UNL line commands.

EXTENTS

Calls for the volser of a DASD.

SPACE

Calls for the volser of a DASD.

SUBCHAN

Calls for the subchannel volser name.

UNIT

Calls for the device address of a DASD. Calls for alter access when volume attributes can be changed, and for the MNT, OFF, and UNL line commands.

VOLSER

Calls for the volser name.

WMAPLENV

Specifies the WLM application environments.

The WMAPPENV command calls for alter access to this resource when the REFresh, RESume and QUIesce line commands are used.

WMSCHENV

Specifies the WLM scheduling environment names.

The WMSCHENV command requests ALTER access for this resource when the OFF, ON, or RESET line commands are used.

XSYSDEST

Specifies the destination system names allowed or restricted when connecting to another system. Specify an exact system name or use an equal sign (=) at the end to specify a partial system name.

The XSYSDEST command calls for the destination system name and the XSC line command.

XSYSORIG

Specifies the originating system names allowed or restricted when connecting to another system. Specify an exact system name or use an equal sign (=) at the end to specify a partial system name.

The XSYSORIG command calls for the originating system name and the XSC line command.

ZAP

Specifies the ZAP command resource that is allowed or restricted. Specify an exact resource value or use an equal sign (=) at the end to specify a partial resource value.

The ZAP command calls for the ZAP resource to validate access to the following resource values:

LABEL.volser

volser is the volume serial number for the LABEL to be zapped. A call is made for this resource value when the ZAP LABEL command is entered.

SPOOL.jesname

jesname is the JES subsystem name for the spool to be zapped. A call is made for this resource value when the ZAP SPOOL command is entered.

VOLSER.volser

volser is the volume serial number for the volume to be zapped. A call is made for this resource value when the ZAP VOLUME command is entered.

VTOC.volser

volser is the volume serial number for the VTOC to be zapped. A call is made for this resource value when the ZAP VTOC command is entered.

Note: External security covers the zapping data sets, members of data sets, and CSECTs through normal data set access.