Using the SecurityHLQ and SecurityClassName parameters

When using the SecurityHLQ parameter, the SecurityClassName parameter must also be specified. For example, using the parameters:

• SecurityHLQ=CAZ
• SecurityClassName=CACLASS1

The VIEW rules for the parameters above would be written as:

RDEFINE CACLASS1 CAZ.SYSTEMD.VIEW.* UACC(NONE)
PERMIT CAZ.SYSTEMD.VIEW.* CLASS(CACLASS1) ID(ADMGRP) ACCESS(READ)

To allow VIEW access on all systems in the sysplex, the rule could be written as:

PERMIT CAZ.*.VIEW.* CLASS(CACLASS1) ID(ADMGRP) ACCESS(READ)

The SecurityHLQ allows the rules to be written for all members of the sysplex rather than having to code a rule for each member.