Controlling DFSMS Functions and Commands (FACILITY Resource Class)

Implementing Security for DFSMS › Controlling DFSMS Functions and Commands (FACILITY Resource Class)

Controlling DFSMS Functions and Commands (FACILITY Resource Class)

The FACILITY class as used by IBM is identified by the name IBMFAC when using CA Top Secret.

A list of DFSMS Function/Command resource values and definitions follows. The values on this list are predefined by IBM for each respective DFSMS Function/Command. A definition of each documented function and two examples showing protection and allowing access are provided. Although extended TSS PERMIT functions such as Prefixing, TIME, and ACTION are not illustrated, they can be used if desired.

Note: An access level of READ is required.

For a more complete list of DFSMS Function/Command resource values and definitions, see the IBM System‑Managed Storage Administration Reference Guide.

DFSMS Function/Command	Definition
STGADMIN.IGD.ACTIVATE.CONFIGURATION	Provides the ability to activate a configuration.
STGADMIN.IDC.DIAGNOSE.CATALOG	Allows IDCAMS DIAGNOSE to run against catalogs.
STGADMIN.IDC.DIAGNOSE.VVDS	Allows access method services diagnose to be run against the VVDS when a comparison against the BCS is being performed. This profile protects the BCS under this circumstance. It does not protect the ability to run AMS DIAGNOSE commands against a VVDS.
STGADMIN.IGG.ALTBCS	Provides the ability to alter BCS (VSAM Basic Catalog Structure) entries.
STGADMIN.IGG.DIRCAT	Provides the ability to use a directed catalog.
STGADMIN.DEFNVSAM.NOBCS	Allows non‑VSAM entries to be defined without BCS entries.
STGADMIN.IGG.DEFNVSAM.NONVR	Allows non‑VSAM entries to be defined without NVR (non‑VSAM Volume Record) entries.
STGADMIN.IGG.DEFNVSAM.NOBCSCHK	Provides the ability to delete an NVR entry without checking the BCS entry.
STGADMIN.IGG.DELETE.NOSCRATCH	Allows a BCS entry to be deleted without deleting the associated VTOC entry and NVR.
STGADMIN.IGG.DELGDG.FORCE	Provides the ability to delete a GDG using the FORCE operand.
STGADMIN.ADR.COPY.BYPASSACS	Allows the DFDSS COPY function to bypass the ACS routines and use the original (pre‑DFSMS) constructs.
STGADMIN.ADR.RESTORE.BYPASSACS	Allows the DFDSS RESTORE function to bypass the ACS routines and use the original (pre‑DFSMS) constructs.
STGADMIN.ADR.COPY.INCAT	Provides the ability to use the INCAT parameter on a DFDSS COPY function.
STGADMIN.ADR.DUMP.INCAT	Provides the ability to use the INCAT parameter on a DFDSS DUMP function.
STGADMIN.ADR.CONVERTV.INCAT	Provides the ability to use the INCAT parameter on a DFDSS CONVERTV function.
STGADMIN.ADR.CONVERTV	Allows the DFDSS CONVERTV function to be used.