Resources › DEVICES Resource Class—Secure Devices

DEVICES Resource Class—Secure Devices

Valid on z/OS.

Use DEVICES to secure system device allocation of graphics, teleprocessing and unit record devices.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) DEVICES(prefix(es))

Prefix length

two to eight characters

Capacity of list

One to five prefixes per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) DEVICES(device‑name, device‑name...)

Prefix length

One to eight characters

Capacity of list

One to five prefixes

DEVICES is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOHAS, and WHOOWNS
• The DEVICES ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The DEVICES ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• DEVICES(OWN) authority to ADD or REMOVE device allocation authority for ACIDs
• DEVICES(XAUTH) authority to permit or revoke the ability to route messages to target userids

The DEVICES resource class supports all masking characters.

The administrator can:

• Specify the access levels NONE and READ.
• Use the following methods to control access to DEVICE resources: Expiration, Facility, Time/Day, and Actions. Only z/OS, ESA release 3.1.3 and above offer support for all resources.

Examples: DEVICES resource class

This example gives JESPGMR ownership of the JES‑related unit record devices on system SYSA:

TSS ADDTO(JESPGMR) DEVICES(SYSA.UR)

This example removes ownership:

TSS REMOVE(JESPGMR) DEVICES(SYSA.UR)

This example permits ACID DRAFTING to allocate graphic devices:

TSS PERMIT(DRAFTING) DEVICES(ESA1.GRAPHIC) ACCESS(READ)

This example prevents allocation of UR type devices:

TSS PERMIT(ALL) DEVICES(SP01.UR) ACCESS(NONE)