CDC Guide for z/OS

10.4.0 HotFix 1
- 10.5.8
- 10.5.6
- 10.5.5
- 10.5.4
- 10.5.3
- 10.5.2
- 10.5.1
- 10.5
- 10.4.1
- 10.4.0

Back Next

Controlling Access to PowerExchange Agent Commands

Use this procedure to restrict access to PowerExchange Agent commands.

Any user who needs to use PowerExchange Agent commands requires read access to this resource. The agent_ID
variable is the AgentID specified in the AGENTCTL member and in the EDMSDIR default options module.

In the following procedure, replace the variable hlq
with the high-level qualifier that you chose when installing PowerExchange.

To control access to PowerExchange Agent commands:

In the hlq
.RUNLIB library, locate the AGENTCTL member and verify that the value of the CmdAuthCheck parameter is YES.

Define the RACF resource profile, or an equivalent security system, called BMCEDM.
agent_ID
.COMMAND.* in class FACILITY.

You can define control for individual agent commands by replacing the asterisk (*) with the command name. For example, the following FACILITY class resource profile only protects the SHUTDOWN command for AgentID AG01:

BMCEDM.AG01.COMMAND.SHUTDOWN

Defining this resource to RACF or an equivalent security system with UACC(READ) effectively disables security for PowerExchange Agent commands. All RACROUTE macros that the agent issues are successful.

You can also disable command security with the CmdAuthCheck configuration parameter. Set its value to NO to disable security checking.

Rename Saved Search

Table of Contents

CDC Guide for z/OS

CDC Guide for z/OS

Controlling Access to PowerExchange Agent Commands

Controlling Access to PowerExchange Agent Commands