Resource names for command authorization

DBRC uses a list of resource names for command authorization support.

The following table lists the resources that can be protected.

Table 1. Resource names for command authorization
Verb Modifier Qualifier
AUTH not applicable .dbname
BACKUP .RECON  
CHANGE .ADS .dbname
CHANGE .BKOUT .ssid
CHANGE .CA .grpname
CHANGE .CAGRP .grpname
CHANGE .DB .dbname
CHANGE .DB .ALL
CHANGE .DBDS .dbname
CHANGE .DBDSGRP .grpname
CHANGE .IC .dbname
CHANGE .PART .dbname
CHANGE .PRILOG .OLDS
CHANGE .PRILOG .RLDS
CHANGE .PRILOG .SLDS
CHANGE .PRILOG .TSLDS
CHANGE .RECON  
CHANGE .RECON .CATDS
CHANGE .RECON .NOCATDS
CHANGE .RECON .CHECK17
CHANGE .RECON .CHECK44
CHANGE .RECON .NOCHECK
CHANGE .RECON .CMDAUTH
CHANGE .RECON .DASDUNIT
CHANGE .RECON .DUAL
CHANGE .RECON .REPLACE
CHANGE .RECON .FORCER
CHANGE .RECON .NOFORCER
CHANGE .RECON .IMSPLEX
CHANGE .RECON .NOPLEX
CHANGE .RECON .LISTDL
CHANGE .RECON .NOLISTDL
CHANGE .RECON .LOGALERT
CHANGE .RECON .LOGRET
CHANGE .RECON .MINVERS
CHANGE .RECON .SIZALERT
CHANGE .RECON .SSID
CHANGE .RECON .STARTNEW
CHANGE .RECON .NONEW
CHANGE .RECON .TAPEUNIT
CHANGE .RECON .TIMEZONE
CHANGE .RECON .TIMEZIN
CHANGE .RECON .TIMEFMT
CHANGE .RECON .TRACEON
CHANGE .RECON .TRACEOFF
CHANGE .RECON .UPGRADE
CHANGE .SG .gsgname
CHANGE .SUBSYS .ssid
CHANGE .SUBSYS .ALL
CHANGE .UIC .dbname
CLEANUP .RECON  
CLEANUP .RECON CAGRANGE
CLEANUP .RECON CAONLY
CLEANUP .RECON LASTCA
CLEANUP .RECON .RETPRD
CLEANUP .RECON .TIME
CLEANUP .RECON .DBRANGE
CLEANUP .RECON .DBONLY
CLEANUP .RECON .LASTIC
CLEANUP .RECON .LISTDL
CLEANUP .RECON .NOLISTDL
DELETE .ADS .dbname
DELETE .ALLOC .dbname
DELETE .BKOUT .ssid
DELETE .CA .grpname
DELETE .CAGRP .grpname
DELETE .DB .dbname
DELETE .DBDS .dbname
DELETE .DBDSGRP .grpname
DELETE .GSG .gsgname
DELETE .IC .dbname
DELETE .LOG .INACTIVE
DELETE .LOG .OLDS
DELETE .LOG .STARTIME
DELETE .LOG .TOTIME
DELETE .PART .dbname
DELETE .RECOV .dbname
DELETE .REORG .dbname
DELETE .SG .gsgname
DELETE .SUBSYS .ssid
DELETE .UIC .dbname
GENJCL .ARCHIVE .ssid
GENJCL .CA .grpname
GENJCL .CLOSE .ssid
GENJCL .IC .dbname
GENJCL .IC .grpname
GENJCL .OIC .dbname
GENJCL .OIC .grpname
GENJCL .RECEIVE .dbname
GENJCL .RECEIVE .grpname
GENJCL .RECOV .dbname
GENJCL .RECOV .grpname
GENJCL .USER .mbrname
GENJCL .USER .dbname
GENJCL .USER .grpname
INIT .ADS .dbname
INIT .CA .grpname
INIT .CAGRP .grpname
INIT .DB .dbname
INIT .DBDS .dbname
INIT .DBDSGRP .grpname
INIT .GSG .gsgname
INIT .IC .dbname
INIT .PART .dbname
INIT .RECON  
INIT .SG .gsgname
LIST .BKOUT .ssid
LIST .BKOUT .ALL
LIST .CAGRP .grpname
LIST .CAGRP .ALL
LIST .DB .dbname
LIST .DB .ALL
LIST .DB .TYPEIMS
LIST .DB .TYPEFP
LIST .DB .TYPHALDB
LIST .DBDS .dbname
LIST .DBDS .grpname
LIST .DBDSGRP .grpname
LIST .DBDSGRP .ALL
LIST .GSG .gsgname
LIST .GSG .ALL
LIST .HISTORY .dbname
LIST .HISTORY .grpname
LIST .LOG .ALL
LIST .LOG .ALLOLDS
LIST .LOG .OLDS
LIST .LOG .STARTIME
LIST .RECON  
LIST .RECON .STATUS
LIST .SUBSYS .ONLINE
LIST .SUBSYS .ssid
LIST .SUBSYS .ALL
LIST .SUBSYS .BATCH
NOTIFY .ALLOC .dbname
NOTIFY .BKOUT .ssid
NOTIFY .CA .grpname
NOTIFY .IC .dbname
NOTIFY .PRILOG .OLDS
NOTIFY .PRILOG .RLDS
NOTIFY .PRILOG .SLDS
NOTIFY .PRILOG .TSLDS
NOTIFY .PRILOG .DPROP
NOTIFY .RECOV .dbname
NOTIFY .REORG .dbname
NOTIFY .SECLOG .OLDS
NOTIFY .SECLOG .RLDS
NOTIFY .SECLOG .SLDS
NOTIFY .SECLOG .TSLDS
NOTIFY .SECLOG .DPROP
NOTIFY .SUBSYS .ssid
NOTIFY .UIC .dbname
RESET .GSG .gsgname
STDBRC not applicable .ssid

For more information about command authorization, see DBRC security.