Resources › IBMFAC Resource Class—Determine IBM Facilities Ownership

IBMFAC Resource Class—Determine IBM Facilities Ownership

Valid on z/OS and z/VSE.

Use IBMFAC determine who has ownership or control over catalog, IDCAMS, SMS, DFDSS and other IBM Facilities.

This resource class is the equivalent to the FACILITY resource class in RACF.

Important! CA Top Secret also supports the XFACILIT and GXFACILIT resource classes, which support prefix lengths up to 246 characters. These resource classes follow the same usage rules as IBMFAC. For detailed information on these resource classes, see the IBM documentation.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) IBMFAC(facility,...)

Prefix length

One to eight characters

Capacity of list

Five facilities per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) IBMFAC(facility,...)

Prefix length

One to forty‑four characters

Capacity of list

Five facilities per TSS command

This keyword uses:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
• The IBMFAC ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The IBMFAC ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• IBMFAC(OWN) authority to protect user access to IBM facilities.
• IBMFAC(XAUTH) authority to permit or revoke access to IBM facilities

The administrator can:

• Use any of the following methods to control access to IBMFAC: Expiration, Facility, Time/Day, and Actions.
• Specify the access levels: ALL, NONE, READ, UPDATE, and WRITE. If ACCESS is not specified, CA Top Secret defaults to NONE access.

Examples: IBMFAC resource class

This example adds an IBMFAC of IDC.DIAG:

TSS ADDTO(DEPT02) IBMFAC(IDC.DIAG)

This example removes ownership:

TSS REMOVE(DEPT02) IBMFAC(IDC.DIAG)

This example allows an ACID to use IBMFAC:

TSS PERMIT(DEPT02) IBMFAC(IDC.DIAG)

This example revokes access:

TSS REVOKE(DEPT02) IBMFAC(IDC.DIAG)

This example grants USER01 control access to BPX.Example IBM facility:

TSS PERMIT(USER01) IBMFAC(BPX.EXAMPLE) ACCESS(CONTROL)