Defining resource names for Db2 objects

The RACF access control module builds resource names depending on the classification model being used.

For single-subsystem scope, the general format for resource name is:

[object-name.]privilege-name

For multiple-subsystem scope, the general format for resource name is:

Db2-subsystem.[object-name.]privilege-name

or, if data sharing:

Db2-group-attachment-name.[object-name.]privilege-name

For multiple-subsystem scope, the RACF access control module obtains the Db2 subsystem name, or group attachment name, from XAPLGPAT.

The RACF access control module uses resource names that are based on the object names and the associated privilege names. See Db2 object types and object names and Privilege names.