Control-M JCL Verify Security

This chapter describes the security measures that are available in Control-M JCL Verify and how to implement them.

Control-M JCL Verify security measures depend on the activation of IOA Security. For information on how to activate IOA security, see IOA Security.

When Control-M JCL Verify Monitor handles a JCL verification request, it uses the Security Access Environment (Access Authority Profile) of the user ID that requests the verification. This security arrangement ensures that the Control-M/JCL Verification process is limited to the access rights of the corresponding user ID (TSO logon, batch job, or IOA Online Monitor session) outside the Control-M JCL Verify Monitor. The user ID that requests the JCL verification is passed to the Control-M JCL Verify Monitor together with other data that describes the verification request, such as which job(s) or JCL(s) are to be verified and various other verification parameters.

Security Access Environment Elements (for users requesting verifications) are created by the Control-M JCL Verify Monitor and saved in a cache maintained by the monitor. Additional requests from the same user do not require the creation of new elements, since the elements for that user are available from the cache. To refresh the Security Access Environment Elements in the cache without stopping and restarting Control-M JCL Verify Monitor, you can use the NEWSECDEF modify command, as described in Monitor command summary in the Control-M JCL Verify User Guide.

When a JCL verification request is received from a remote node (that is, a verification request from a Control-M JCL Verify monitor running on an LPAR other than the local one) and the user ID that issued the verification request from the remote node is undefined in the local security system, you can use the Control-M/JCL Verification installation parameter RMTUSER instead of the requestor user ID. For more information about the RMTUSER parameter, see Installing Control-M JCL Verify in the INCONTROL for z/OS Installation Guide: Installing.