Allowing a System Administrator to Control API Tracing Activity

IBM® recommends that the installation allow a system administrator to control API tracing activity on each z/OS system, even when tracing is restricted to only a few other users or for only a limited number of conversations. For example, to allow only tracing START and STOP requests issued from user ID ADMIN1, for all conversations for all TPs that run on any LU in the system, use these commands:

RDEFINE FACILITY ATBTRACE.*.*.* UACC(NONE)
PERMIT ATBTRACE.*.*.* CLASS(FACILITY) ID(ADMIN1) ACCESS(READ)
SETROPTS CLASSACT(FACILITY) RACLIST(FACILITY)
SETROPTS RACLIST(FACILITY) REFRESH

These commands prevent any trace activity on the system; you could use them for a production system, changing the access only when an error occurs and you want to collect trace data to diagnose the problem.