PRIVPGM Keyword—Specify Programs in Control

Keywords › PRIVPGM Keyword—Specify Programs in Control

PRIVPGM Keyword—Specify Programs in Control

Valid on z/OS.

Use the PRIVPGM keyword to specify the full names of the programs that must be in control when a data set is accessed. A privileged program specification restricts the use of a resource to a control path.

This keyword has the following format:

TSS PERMIT(acid) DSN(dataset)|FCT(fct_dataset) PRIVPGM(program)

acid

Specifies the ACID to which you are permitting access to a data set.

dataset|fct_dataset

Specifies the data set name or data set prefix to which the ACID is gaining access. An FCT is a data set that is accessed through CICS.

Prefix length: One to 44 characters

program

Specifies the programs that must be in control when a data set is accessed. Any specified prefixes must include (G) at the end of the prefix.

Prefix length: One to eight characters

Capacity of list: One to eight program names

(DSNAMEs only) PRIVPGM may be combined with LIBRARY to specify the library in which the privileged program must reside. If LIBRARY is not specified, the privileged program must come from the link pack area (LPA) or from a library in the link list.

The privileged program specified in the PERMIT function must be executed through one of the following methods:

JCL keyword EXEC PGM=program
A program executed through LINK, LOAD, ATTACH, or XCTL

Technically, the program must be associated with the top‑most or bottom‑most Program Request Block (PRB) in z/OS.

This keyword is used with:

The PERMIT command
The ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, MSCA, and ALL
Resource(XAUTH) authority (required to specify PRIVPGM for resources)

Example: Permit Access to SMF Data Sets through a Link‑Listed Program

This example permits access to SMF data sets SYS1.MANX and SYS1.MANY specifically through a link‑listed program:

TSS PERMIT(SYS92) ACCESS(CONTROL)
                  DSNAME(SYS1.MAN+)
                  PRIVPGM(SMFMNGR)

Example: Permit Access to a Data Set through Program PRSP60

This example permits access to a personnel data set only if program PRSP60 is used and is loaded from a specific library:

TSS PERMIT(PAY100K) DSNAME(PERS.*.MASTER)
                    PRIVPGM(PRSP60)
                    LIBRARY(PERS.LOADLIB)

Example: Permit Access to a Data Set through Any Program Beginning with PRSP

This example permits access to the same personnel data set but allows any program beginning with the characters PRSP:

TSS PERMIT(PAY100K) DSNAME(PERS.*.MASTER)
                    PRIVPGM(PRSP(G))

Example: Permits Access to a CICS file through CICS Program PCC505

This example permits access to a CICS file only if the CICS program in control is PCC505:

TSS PERMIT(CLK505P) FCT(PARTS)
                    PRIVPGM(PCC505)