Resources › IUCV Resource Class—Secure IUCV Target Users

IUCV Resource Class—Secure IUCV Target Users

Valid on z/VM.

Use IUCV to secure Inter User Communication Vehicle (IUCV) target users.

Note: IUCV communication targets controls the ability of users to issue an IUCV CONNECT to the virtual machine designated by the resource name.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) IUCV(userid,userid,userid,...)

Prefix length

One to eight characters

Capacity of list

One to five userids per TSS command

Generic prefixing allows the administrator to group a set of similar resource names together, and define them by one generic prefix.

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) IUCV(oper,oper,oper,...)

Prefix length

One to eight characters

Capacity of list

Five resources per TSS command

This keyword uses:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
• The IUCV ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The IUCV ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• IUCV(OWN) authority to ADD or REMOVE ownership from ACIDs
• IUCV(XAUTH) authority to permit or revoke access to resources

The administrator can use any of the following methods to control access to IUCV: Expiration, Time/Day, and Actions.

Examples: IUCV resource class

This example protects users in the application department issuing an IUCV connect to virtual machine APP17:

TSS ADDTO(APPDEPT) IUCV(APP17)

This example removes ownership:

TSS REMOVE(APPDEPT) IUCV(APP17)

This example permits user VMUSER1 to connect with DBSERVE via IUCV:

TSS PERMIT(VMUSER1) IUCV(DBSERVE)

This example revokes access:

TSS REVOKE(VMUSER1) IUCV(DBSERVE)