Step 5.1 IOA Security Definitions (Optional)

IOA security definition samples are found in the IOASSAF2 member of the IOA INSTWORK library. The IOASSAF2 member is created in the IOA INSTWORK library after selecting this step.

Review this member and make all required changes according to your site.

1. Define IOA to CA-ACF2/SAF interface.

   The IOASSAF2 member contains ACF2 commands that translate the SAF class FACILITY to the ACF2 resource type CMF.

   If the SAF class FACILITY is already in use, check if this class is translated to another ACF resource type. Specify the following command:

   SET CONTROL(GSO) SYSID(****)
   SHOW CLASMAP

   For versions prior to ACF2 version 6.0, specify the following command:

   SET CONTROL(GSO) SYSID(****)
   LIST SAFMAPS

   This command determines the resource type to which the class FACILITY is translated. If the resource type is not CMF, change all occurrences of resource type "CMF" in this member to the resource type in use.

2. Associating users with Extended Definition mode

   Add the following ACF2 commands to define the $$IOAEDM entity to ACF2 and authorize users to this entity.

   SET RESOURCE(CMF)
   COMP
   $KEY($$IOAEDM.qname)
   UID(USERA) ALLOW

   If the user does not have access to this entity, the user is set to work in Basic Definition mode. Otherwise, the user is set to work in Extended Definition mode.

3. Submit the job.

   Verify that all job steps end with a condition code of 0.

   This job must be run under a user of an ACF2 administrator who is authorized to enter these ACF2 commands.

4. Refresh ACF2 definitions.

   Issue the following MVS commands to refresh the definitions of the ACF2:

   F ACF2,REFRESH(SAFDEF)
   F ACF2,REFRESH(CLASMAP)

   For versions prior to ACF2 version 6.0, run the commands:

   F ACF2,REFRESH (OPTS)
   F ACF2,REFRESH (SAFMAPS)

5. Rebuild the resource type CMF rules.

   Issue the following MVS command:

   F ACF2,REBUILD(CMF)

   Add the ACF2 commands to the GSO member in the ACF2 parameter library. These commands are specified in the IOASSAF2 member.

   This job must end with a condition code of 4 or less.