HP XP7 Command View Advanced Edition Mainframe Agent Installation and Configuration Guide (TK981-96005, May 2014)

Setting the dataset security
When an XP7 mainframe agent is linked to Replication Manager, the XP7 mainframe agent job
references the XP7 mainframe agent's configuration files. Therefore, be sure to grant the XP7 mainframe
agent job READ permission for the configuration files that are accessed by the XP7 mainframe agent
job.
The configuration files to which READ permission is to be granted are the following datasets, which
have their prefixes specified by the YKP2A command:
• Disk configuration definition file
• Copy group definition file
• Command device definition file
Setting up the Resource Access Control Facility (RACF) when linking with
Replication Manager
To enable XP7 mainframe agent communications, set an environment for the security program (RACF).
To enable use of UNIX services, use the RACF command from TSO/E to define the management user
and management group IDs held by the OMVS segment in the RACF STARTED class of the XP7
mainframe agent cataloged procedure for startup. The following is an example of using the TSO/E
command with the STARTED class:
Example of setting using the TSO/E command:
->SETROPTS GENERIC(STARTED)
->RDEFINE STARTED YKAGENTD.* STDATA(USER(user-ID) GROUP(group-ID))
->SETROPTS RACLIST(STARTED) REFRESH
To start the XP7 mainframe agent, you need to define one of the following profiles in the RACF
FACILITY class, and then grant the view permission for the defined profile to the administrator user
ID:
In addition, before the YKP2A command is executed, grant view permissions for one of the following
profiles to the user ID of the user who intends to execute the command:
• STGADMIN.YKA.BCM.YKQUERY profile
• STGADMIN.YKA.BCM.COMMANDS profile
Before executing the YKP2A command, grant the view permission for one of these profiles to a user
who can execute the command. For details about granting the view permission, see the Security Server
RACF Security Administrator's Guide. For details on the YKP2A command, see “YKP2A
command” on page 61.
Following is an example of using the TSO/E command with the FACILITY class:
->SETROPTS CLASSACT(FACILITY)
->RDEFINE FACILITY STGADMIN.YKA.BCM.YKQUERY UACC(NONE)
->PERMIT STGADMIN.YKA.BCM.YKQUERY CLASS(FACILITY) ID(user-ID) ACCESS(READ)
Setting up XP7 mainframe agent28