DO COMMAND
or
ON COMMAND

$$IOACMD.qname.command‑text

This is the same structure that the IOASE12 IOA security module builds to verify authority for operator commands. If the current user is allowed to issue the operator command under the IOA operator command utility, that user is also allowed to define a rule containing this command.

DO DISPLAY

$$CTOMSG.qname.new‑msg‑text

ON MESSAGE

$$CTOMSG.qname.msgid

ON EVENT

$$CTOENV.qname.event‑text

DO CTOPCMSG
or
ON CTOPCMSG

$$CTOPCM.qname.msg‑text

ON JOBARRIV

$$CTOJAR.qname.jobname

ON JOBEND

$$CTOJED.qname.jobname

ON DSNEVENT

$$CTODSN.qname.jobname

ON RULE

$$CTORUL.qname.owner.rulname (owner is the owner of the rule)

ON STEP

$$CTOSTP.qname.jobname

DO COND
or
DO RESOURCE

$$IOARES.qname.resource‑name

This is the same structure that the IOASE07 IOA security module builds to verify the user’s authorization to access prerequisite conditions and resources. If a user is allowed to access a condition or resource, that user can also access the condition or resource through a Control‑O rule execution.

DO FORCEJOB

$$CTOCMO.qname.lib‑name.table

where

• lib‑name is the first 21 characters of the Control-M schedule library.
• table is the member name in the Control-M schedule library.

The whole entity name is truncated by RACF to 39. This means that table will be entirely truncated unless lib-name is less than 21.

DO TSO

$$CTOTSO.qname.command‑text

DO SHELL

$$CTOSHL.qname.script-name

DO SET for an IOA AutoEdit variable

$$CTOSET.qname.variable‑name

DO DOM (delete operator message)

$$CTODOM.qname

DO ASKOPER if a WTOR is issued

$$CTOASK.qname.wtor‑text

DO KSL

$$CTOKSL.qname.ksl‑name

DO RULE

$$CTORUL.qname.owner.rulname

where owner is the value of parameter OWNER in statement DO RULE.

DO STOPJOB

$$CTOJST.qname

DO SYSREQ

$$CTOSRQ.qname.sysreq‑type

where sysreq‑type is the SYSREQ option. Valid value: ENQINFO

Runtime security setting

$$CTORTS.qname.runtime‑sec.

Valid values:

• TRIGGER
• OWNER
• NONE

as specified in rule parameter RUNTSEC.