Changing the RACF FACILITY CLASS ID for the console operator’s terminal

Because not all of your DFSMShsm-authorized storage administrators are generally involved with disaster recovery, you should restrict the ability to issue the ABACKUP and ARECOVER commands. You can restrict who can issue ABACKUP and ARECOVER commands when you specify a RACF® FACILITY CLASS and that FACILITY CLASS is active. When you create the FACILITY CLASS, you must explicitly authorize users who have authority to issue these commands; terminal operators (as a group) are authorized when you specify the OPER ID on the RACF PERMIT command, but you can authorize them with a different ID (that you choose) if you use the following PATCH command. For more information about the OPER ID for RACF FACILITY CLASSES, see z/OS DFSMShsm Storage Administration. For more information about RACF FACILITY CLASSES, see Creating the RACF FACILITY class profiles for ABARS.

Some sites have used the OPER ID for other operations and those sites need a way to define the operator’s terminal to the RACF FACILITY CLASS. By issuing the following PATCH command, you can direct RACF to recognize an ID other than OPER as the authorized ID for the console operator’s terminal.

PATCH .ABRCB.+4BC 'userid'               /* Change the RACF FACILITY     */
                                         /* CLASS ID that defines the    */
                                         /* console operator's terminal. */

Note: userid is defined as eight characters. The first seven characters contain the user ID to be used and the eighth character is a blank.