Defining Security Protection Profiles in IBM Security Server RACF › Utility Protection Resource Protection Profiles › Define Specific Utility Protection Profiles

Define Specific Utility Protection Profiles

Use the RDEFINE command to define a specific utility to IBM Security Server RACF for eligible CA Tape Encryption utilities. You can specify this profile globally for all BES subsystems or locally for a specified BES subsystem.

This command has the following format:

RDEF CA@BES BESn.UTILITY.utility_name                             
     OWNER(username)                                              
     DATA('commments'       )

RDEF

Specifies the RDEFINE command.

CA@BES

Specifies the general resource class for CA Tape Encryption. This is always CA@BES.

n

Indicates the BES task number. If you specify BES with no subsystem identifier, the profile applies to all BES subsystems.

UTILITY

Specifies that this statement defines the specified utility on the specified BES subsystem.

utility_name

Indicates one of the eligible utilities. Options for this parameter are as follows:

TBESHOW

Specifies the BES database listing utility.

TBEKMUTL

Specifies the BES key maintenance utility.

OWNER(username)

Specifies the user name of the primary profile owner, typically the security administrator.

DATA('comments')

Specifies user-written comments to describe the profile.

Note: For the RDEFINE and PERMIT commands in the command protection profiles, the DATA field is a comment field for providing user-supplied comments about the profile.

Example: Define an eligible utility for a specific subsystem for RACF

This example defines the TBESHOW utility to IBM Security Server RACF locally for BES1.

DEF CA@BES BES1.UTILITY.TBESHOW                                  
     OWNER(SECADMIN)                                             
     DATA('CA Tape Encryption BATCH UTILITY PROTECTION'  )