Specifying CICSPlex SM resource names in profiles

This section provides the resource names for CICSPlex® SM views to be used in RACF® profiles. Refer to Example tasks: security for profile examples.

You can create RACF profiles for CICSPlex SM views for a specific CICS® system, a group of CICS systems, or all systems comprising a CICSplex.

CICSPlex SM views are divided into groups that reflect the functions they perform. Within each functional group, the views are divided by their type. Functional groups can be even further qualified with the addition of a context and, for some groups, a scope. You can control access to a specific set of views (and their associated action commands) by identifying the set in a profile, using one of the following resource name formats:Start of change
  • function.type.context
  • function.type.context.scope
End of change where:
function
is the name of the CICSPlex SM function to be affected:
Function
Meaning
ANALYSIS
Real-time analysis
BAS
Business application services
CONFIG
CMAS configuration
MONITOR
Resource monitoring
OPERATE
Operations
TOPOLOGY
CICSplex configuration
WORKLOAD
Workload management
type
is the specific or generic name of an area that qualifies the CICSPlex SM function to be affected. The specific names are:
Type
Meaning
AIMODEL
CICS AIMODEL
BRFACIL
Link3270 Bridge Facility
CONNECT
CICS connections
DB2DBCTL
DB2/DBCTL resources and subsystems
DEF
CICSPlex SM definitions
DOCTEMP
Document templates
ENQMODEL
CICS global enqueue models
ENTJAVA
CorbaServers and deployed DJARs
EXIT
CICS exits
FEPI
CICS FEPI resources
FILE
CICS files
PARTNER
CICS partners
PROCTYPE
CICS BTS Process types
PROFILE
CICS profiles
PROGRAM
CICS programs
REGION
CICS region data
RQMODEL
CICS request models
TASK
CICS active tasks
TCPIPS
TCP/IP services
TDQUEUE
CICS transient data queues
TERMINAL
CICS terminals
TRAN
CICS transactions
TSQUEUE
CICS temporary storage queues
UOW
CICS units of work
The type must be valid for the specified function. Table 1 lists the valid function.type combinations.
context
is the specific or generic name of the CMAS or CICSplex to be affected by the designated function and type. If the function is CONFIG or TOPOLOGY, the context must be a CMAS. For all other functions, the context must be a CICSplex.
scope
Start of changeis the specific or generic name of a CICS system within the CICSplex identified as the context or the CICSplex itself. Do not specify scope when:
  • The context is a CMAS
  • or the type is DEF
for CICSPlex SM definitions.
Note:
  1. In this section only, the term scope means CICS systems. It does not mean the scope (CICS system groups) you have defined as part of the CICSPlex SM environment, nor does it refer to a BAS logical scope.
  2. To include all of the systems comprising a CICS system group when their names do not match a generic system name, you must establish a profile for each system.
End of change