1. From TSO go to RACF

Menu Help
--------------------------------------------------------------------------
IBM Products Panel
Option ===>

1 SMP/E System Modification Program/Extended
2 ISMF Integrated Storage Management Facility
3 RACF Resource Access Control Facility

4 HCD Hardware Configuration Dialogs
5 SDSF Spool Search and Display Facility
6 IPCS Interactive Problem Control System
7 DITTO DITTO/ESA for MVS Version 1
8 RMF Resource Measurement Facility
9 DFSORT Data Facility Sort
10 OMVS MVS OpenEdition



2. Enter 3


RACF - SERVICES OPTION MENU
OPTION ===>

SELECT ONE OF THE FOLLOWING:

1 DATA SET PROFILES

2 GENERAL RESOURCE PROFILES


3 GROUP PROFILES AND USER-TO-GROUP CONNECTIONS

4 USER PROFILES AND YOUR OWN PASSWORD

5 SYSTEM OPTIONS

6 REMOTE SHARING FACILITY

7 DIGITAL CERTIFICATES
99 EXIT
Licensed Materials - Property of IBM
5695-039 (C) Copyright IBM Corp. 1983, 1994
All Rights Reserved - U.S. Government Users
Restricted Rights, Use, Duplication or Disclosure
restricted by GSA ADP Schedule Contract with IBM Corp.



3. Enter 2


RACF - GENERAL RESOURCE PROFILE SERVICES
OPTION ===>

SELECT ONE OF THE FOLLOWING:

1 ADD Add a profile
2 CHANGE Change a profile
3 DELETE Delete a profile
4 ACCESS Maintain access list
5 AUDIT Monitor access attempts (Auditors only)


D or 8 DISPLAY Display profile contents
S or 9 SEARCH Search the RACF data base for profiles



4. Enter 1

Class name must be STARTED, Profile name – ATTDAEMN



RACF - GENERAL RESOURCE SERVICES - ADD
OPTION ===>

ENTER THE FOLLOWING PROFILE INFORMATION:

CLASS ===> started

PROFILE ===> attdaemn


<==end of data

USE A MODEL ===> no YES or NO


NOTE: Embedded Blanks are NOT ALLOWED in class or profile names.

5. Enter the USERID with OMVS segment defined (P390) and additional inf = yes

RACF - ADD GENERAL RESOURCE PROFILE
COMMAND ===>

CLASS: STARTED
PROFILE _ ATTDAEMN.*


ENTER OR CHANGE THE FOLLOWING INFORMATION:

OWNER ===> P390 Userid or group name
LEVEL ===> 0 0-99
FAILED ACCESSES ===> FAIL FAIL or WARN
UACC ===> NONE NONE, READ, UPDATE,
CONTROL, ALTER or EXECUTE
AUDIT SUCCESSES ===> NOAUDIT READ, UPDATE, CONTROL,
ALTER, or NOAUDIT
AUDIT FAILURES ===> READ READ, UPDATE, CONTROL,
ALTER, or NOAUDIT
NOTIFY ===> Userid

TO ADD OPTIONAL INFORMATION, ENTER YES ===> yes

6. Enter STDINF = YES

RACF - ADD GENERAL RESOURCE PROFILE
COMMAND ===>

CLASS: STARTED
PROFILE _ ATTDAEMN.*


To add optional information, enter YES:

INSTALLATION DATA ===>
APPLICATION DATA ===>
ACCESS LIST ===>
SECURITY LEVEL or CATEGORIES ===>
SECURITY LABEL ===>
MEMBERS ===>
SECURED SIGNON APPLICATION KEY ===>
TAPE VOLUME INFORMATION ===> TAPEVOL class only
TERMINAL INFORMATION ===> TERMINAL class only
VTAM SESSION ===> APPCLU class only
DLF DATA ===> DLFCLASS class only
STDATA INFORMATION ===> yes STARTED class only
SYSTEMVIEW INFORMATION ===> SYSMVIEW class only


7. Specify USER and GROUP for started task (p390, SYS1)

RACF - ADD GENERAL RESOURCE
STDATA INFORMATION
COMMAND ===>


Enter the desired STDATA information, then press ENTER to continue


Specify started task user (USER) ===> p390 Userid
Use the procname as userid (=MEMBER) ===> YES to use procname

Specify started task group (GROUP) ===> sys1 Group name
Use the procname as group (=MEMBER) ===> YES to use procname

Started task should run (TRUSTED) ===> YES or NO

Started task should run (PRIVILEGED) ===> YES or NO

Issue message to operator (TRACE) ===> YES or NO

8. Do raclist refresh for class STARTED (or better ask system manager to do it)


NOTE*
The same process must be executed for ATTSRVR profile