WebSphere › WebSphere Security › Authorization Checking › Server Authorization Checking

Server Authorization Checking

To control access to WebSphere for z/OS resources, give:

• Greater authority to the control regions. These contain WebSphere for z/OS system code, are trusted, deal with multiple users, have greater authorization and run APF‑authorized.
• Less authority to the server regions. These contain application code, are not trusted (other than having authorization to get work and to attach to data stores), and should run unauthorized.