Defining Security Protection Profiles in IBM Security Server RACF › Utility Protection Resource Protection Profiles › PERMIT Command for Defining Utilities Permission for RACF

PERMIT Command for Defining Utilities Permission for RACF

Use the PERMIT command to define permissions for a specific eligible utility and one or more specific users on a specified subsystem for IBM Security Server RACF. Use this command with an associated RDEFINE command for the utility.

PE   BESn.UTILITY.utility_name CLASS(CA@BES) ACCESS(READ)           
     GENERIC ID(SYSTEMS)

PE

Indicates the PERMIT command.

n

Indicates the BES task number. If you specify BES with no subsystem identifier, the profile applies to all BES subsystems.

UTILITY

Specifies that this statement defines permissions for the specified utility on the specified BES subsystem.

utility_name

Indicates one of the eligible CA Tape Encryption utilities. Options for this parameter are as follows:

TBESHOW

Specifies the BES database listing utility.

TBEKMUTL

Specifies the BES key maintenance utility.

CLASS(CA@BES)

Specifies the general resource class for CA Tape Encryption. For utilities, this is always CA@BES.

ACCESS

Specifies the permission access granted. For granting access to run utilities, the minimum value that you need to specify is READ. It allows the specified user to execute the utility.

GENERIC

Specifies that the utility name is treated like a generic name, even if no generic characters are specified.

ID(username)

Specifies one or more user names that have permission to use the key.