Using RACF Variables for the APPL Class

Instead of issuing a set of RACF® commands for each individual LU, as illustrated in Granting Access to Only Specific Users or Groups and Prohibiting Security_None Allocate Requests, you may use RACF variables to secure multiple LUs with a single set of commands. For example, the following commands use a RACF variable for multiple LUs that are not part of a VTAM® generic resource group:

RDEFINE RACFVARS &LUS UACC(NONE) ADDMEM(LLU1 LLU2 LLU3)
RDEFINE APPL &LUS UACC(NONE)
PERMIT &LUS CLASS(APPL) ID(USER1) ACCESS(READ)
PERMIT &LUS CLASS(APPL) ID(USER2) ACCESS(READ)
⋮
SETROPTS CLASSACT(APPL RACFVARS) RACLIST(RACFVARS)

You may use RACF variables for LUs in a VTAM generic resource group as well; simply use the generic resource name as a value for the ADDMEM operand.

Any time a RACFVARS profile is changed, SETROPTS RACLIST processing for the RACFVARS class must be refreshed for the change to take effect.