Resources › IBMFAC Resource Class—Determine IBM Facilities Ownership

IBMFAC Resource Class—Determine IBM Facilities Ownership

Valid on z/OS and z/VSE.

Use IBMFAC determine who has ownership or control over catalog, IDCAMS, SMS, DFDSS and other IBM Facilities.

Equivalent resource class to RACF class FACILITY

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) IBMFAC(facility,...)

Prefix length

One to eight characters

Capacity of list

Five facilities per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) IBMFAC(facility,...)

Prefix length

One to forty‑four characters

Capacity of list

Five facilities per TSS command

This keyword uses:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
• The IBMFAC ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The IBMFAC ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• IBMFAC(OWN) authority to protect user access to IBM facilities.
• IBMFAC(XAUTH) authority to permit or revoke access to IBM facilities

The administrator can:

• Use any of the following methods to control access to IBMFAC: Expiration, Facility, Time/Day, and Actions.
• Specify the access levels: ALL, NONE, READ, UPDATE, and WRITE. If ACCESS is not specified, CA Top Secret defaults to NONE access.

Examples: IBMFAC resource class

This example adds an IBMFAC of IDC.DIAG:

TSS ADDTO(DEPT02) IBMFAC(IDC.DIAG)

This example removes ownership:

TSS REMOVE(DEPT02) IBMFAC(IDC.DIAG)

This example allows an ACID to use IBMFAC:

TSS PERMIT(DEPT02) IBMFAC(IDC.DIAG)

This example revokes access:

TSS REVOKE(DEPT02) IBMFAC(IDC.DIAG)