Controlling Access to PowerExchange Agent Services
Controlling Access to PowerExchange Agent Services
You can restrict access to PowerExchange Agent services.
The hlq.SAMPLIB contains sample commands for the most common mainframe security products. The member #SECURTY directs you to the specific member for the type of security product for your system.
Any job that requests PowerExchange Agent services must be granted read access to this resource. The agent_ID variable is the AgentID specified in the AGENTCTL member and the default options module EDMSDIR.
In the following procedure, replace the variable hlq with the high-level qualifier that you chose when installing PowerExchange.
To control access to PowerExchange Agent services:
In the
hlq
.RUNLIB library, locate the AGENTCTL member and verify that the value of the InitAuthCheck parameter is YES.
Define the RACF resource profile, or an equivalent security system, named BMCEDM.agent_ID.REGISTER in class FACILITY.
Defining this resource to RACF, or an equivalent security system, with UACC (READ) effectively disables registration security for PowerExchange Agent services. All RACROUTE macros that the agent issues are successful.
You can also disable registration security with the InitAuthCheck configuration parameter. Set its value to NO to disable security checking.