Resources › VMDEV Resource Class—Secure z/VM Real Devices

VMDEV Resource Class—Secure z/VM Real Devices

Valid on z/OS.

Use VMDEV to secure access to z/VM real devices.

When used with TSS ADDTO or REMOVE, this resource class has the following format:

TSS ADDTO(acid) VMDEV(device) 

Prefix length

2 to 26 characters.

Capacity of list

1-8 prefixes per TSS command.

When used with TSS PERMITor REVOKE, this resource class has the following format:

TSS PERMIT(acid) VMDEV(device) 

Prefix length

1 to 246 characters

Capacity of list

1-8 prefixes per TSS command.

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
• The VMDEV ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADDTO or REMOVE
• The VMDEV ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT or REVOKE
• VMEDV(OWN) authority to ADDTO or REMOVE ownership of VMDEV resources from ACIDs
• VMDEV(XAUTH) authority to permit or revoke access to VMDEV resources

An administrator can use any of the following methods to control access to VMDEV resources: Expiration, Facility, Program Pathing, Time/Day, and Actions.

Examples: VMDEV resource class

This example protects the resource by assigning ownership to the Corporate Department. After ownership is assigned, the administrator can PERMIT access to users or profiles.

TSS ADDTO(CORPORAT) VMDEV(DASD) 

This example permits users in the Technical Services Department to access DISK1234.

TSS PERMIT(TECHPROF) VMDEV(DASD.DISK1234)

This example revokes access to DISK1234:

TSS REVOKE(TECHPROF) VMDEV(DISK1234)