Peter, Sometimes opening cases to IBM is a faster process to get answers.
However Check out the following manuals IBM z/OS DFSMShsm Primer http://www.redbooks.ibm.com/redbooks/pdfs/sg245272.pdf Presentation on Best Practices for DFHSM http://publib.boulder.ibm.com/infocenter/ieduasst/stgv1r0/topic/com.ibm.iea. zos/zos/1.0/DFSMS/BestPractices1.pdf DFSMShsm Implementation and Customization Guide http://publibz.boulder.ibm.com/epubs/pdf/dgt2i4a0.pdf For RACF questions the RACF List is the better place to be. And remember everyone has real jobs, they respond when they can or when the question is specific. A question that might not get response might be: Anyone know if A works. A question that will probably get a response When I did X Y happened, the following message occurred (always include complete messages). I looked in the manuals (specify which ones) and it was not clear on what process should be followed Lizette > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of Peter Hunkeler > Sent: Wednesday, July 30, 2014 11:13 PM > To: [email protected] > Subject: Do or Don't: Define generic profiles in RACF class STARTED? > > First posted on RACF-L under topic "How to define STARTED class profiles for > DFHSM (are generic profiles ok)?", but not much response. Reposting here under > new topic. > > > > > Need to define STARTED clas profiles for DFHSM and its helper STCs. The helper > STCs have names starting with ARC and DSS, and some numeric part that > depends on the number of HSMs in the sysplex and the number of parallel task they > start. > > The easiest way would be to define profiles ARC*.* and DSS*.*, the more > cumbersome way to define one profile for each possible STC. > > Someone here claims that it is an absolute no-go to define generic profiles (for the > part before the dot) in class STARTED. Especially if the task need to run > TRUSTED. > > I think there is no danger in doing so, because it cannot be misused, *if* the > PROCLIBs and the MVS START commands are properly protected. Anyone with > update access to PROCLIBs can misused any of the trusted STCs, can't they? > > Any thoughts or recommendations? > > -- > Peter Hunkeler > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
