Example of defining the IEAABD.DMPAUTH profile

  1. Define a profile that protects the resource IEAABD.DMPAUTH in the FACILITY class: 
    RDEFINE FACILITY IEAABD.DMPAUTH UACC(NONE)
  2. If you want to give a user an access authority that is different from the one you specified on the RDEFINE command (in this example, an access authority of READ), enter: 
    PERMIT IEAABD.DMPAUTH CLASS(FACILITY) ID(ASMITH) ACCESS(READ)
    When you specify an access authority on either the RDEFINE command or PERMIT command, RACF® allows access to program dumps as follows:
    • A user who has UPDATE or greater authority to the IEAABD.DMPAUTH resource can obtain program dumps.
    • A user who has READ authority to the IEAABD.DMPAUTH resource can obtain program dumps unless a program was fetched from a library to which the user has only EXECUTE authority. A user cannot obtain a dump of a program to which the user has only EXECUTE authority.

      For more information, see Using EXECUTE access for programs and libraries in ENHANCED mode.

    • A user who has less than READ authority to the IEAABD.DMPAUTH resource cannot obtain program dumps.