Restricting change of history file settings

By default, all users with UPDATE access to a history file can change the history file prefix or the minimum or maximum number of fault entries.

Either of the following methods can be used:

To restrict the change of settings for a given history file using either of the above methods, the security administrator can define an HFZ_ADMIN XFACILIT profile for the history file, to which access can be granted as appropriate.

Read syntax diagramSkip visual syntax diagram
Syntax

>>-HFZ_ADMIN.history-file-dsn----------------------------------><

where history-file-dsn is the fully qualified data set name of the history file.

To change history file settings after the HFZ_ADMIN XFACILIT profile is defined, a user must have both of the following access permissions:
  • UPDATE (or greater) access to the HFZ_ADMIN XFACILIT profile
  • UPDATE (or greater) access to the history file, through either normal security server data set profiles, or through XFACILIT (for details, see Managing history file fault entry access).
The following sample RACF® commands define an HFZ_ADMIN XFACILIT profile for history file MY.HIST and grant Z Abend Investigator administrator authorization to change settings for users who are members of group PAYROLL:
RDEFINE XFACILIT HFZ_ADMIN.MY.HIST UACC(NONE)
PERMIT HFZ_ADMIN.MY.HIST CLASS(XFACILIT) ID(PAYROLL) ACCESS(UPDATE)