Previous Topic: RACF Data Set Selection Profiles

Next Topic: TBESAF99 Global Statement Definition

RACF Resource Profiles

The following profiles can be used as either GLOBAL or LOCAL resource-level profiles. GLOBAL resource profiles are defined by omitting the BES subsystem number following the BES prefix.

Command Protection Profiles:

RDEF OPERCMDS BESn.command_name OWNER(besuser)
PE BESn.command_name    ACCESS(READ) CLASS(OPERCMDS) ID( user-id )
PE BESn.command_name    ACCESS(NONE) CLASS(OPERCMDS) ID( user-id )         
Application Management Protection Profiles:
RDEF CA@BES BESn.CAEKMAPI OWNER(besuser)
PE BESn.CAEKMAPI  ACCESS(READ) CLASS(CA@BES) ID( user-id ) 
PE BESn.CAEKMAPI  ACCESS(NONE) CLASS(CA@BES) ID( user-id )

Key Protection-Digital Certificates:

RDEF CA@BES BESn.KEYCERT.certificate_name OWNER(besuser)
PE BESn.KEYCERT.certificate_name  ACCESS(READ) CLASS(CA@BES) ID( user-id )
PE BESn.KEYCERT.certificate_name  ACCESS(NONE) CLASS(CA@BES) ID( user-id )          

Key Protection-Code Books:

RDEF CA@BES BESn.KEYCODE.code_book_name OWNER(besuser)
PE BESn.KEYCODE.code_book_name  ACCESS(READ) CLASS(CA@BES) ID( user-id )
PE BESn.KEYCODE.code_book_name  ACCESS(NONE) CLASS(CA@BES) ID( user-id ) 

Key Protection-Symmetric Keys Books:

RDEF CA@BES BESn.KEYSYMM.symmetric_key_name  OWNER(besuser)
PE BESn.KEYSYMM.symmetric_key_name ACCESS(READ) CLASS(CA@BES) ID( user-id)
PE BESn.KEYSYMM.symmetric_key_name ACCESS(NONE) CLASS(CA@BES) ID( user-id)

Utility Protection Profiles:

RDEF CA@BES BESn.UTILITY.TBEKMUTL|TBESHOW  OWNER(besuser)
PE BESn.UTILITY.TBEKMUTL|TBESHOW ACCESS(READ) CLASS(CA@BES) ID( user-id )
PE BESn.UTILITY.TBEKMUTL|TBESHOW ACCESS(NONE) CLASS(CA@BES) ID( user-id )