Step ENSMIS

//* Step ENSMIS enables the SMI-S CIM providers
//ENSMIS EXEC PGM=IKJEFT01,DYNAMNBR=99
//SYSPRINT DD SYSOUT=*
//SYSTSPRT DD SYSOUT=*
//SYSTSIN  DD *
 SETROPTS CLASSACT(FACILITY) RACLIST(FACILITY) GENERIC(FACILITY)
 RDEFINE FACILITY IOSCDR UACC(NONE)

 PERMIT IOSCDR CL(FACILITY) ID(CFZUSRGP) ACCESS(UPDATE)
 PERMIT IOSCDR CL(FACILITY) ID(CFZADMGP) ACCESS(UPDATE)
 PERMIT IOSCDR CL(FACILITY) ID(CFZSRV) ACCESS(UPDATE)

 RDEFINE FACILITY IOSPORTS UACC(NONE)
 PERMIT IOSPORTS CL(FACILITY) ID(CFZUSRGP) ACCESS(UPDATE)
 PERMIT IOSPORTS CL(FACILITY) ID(CFZADMGP) ACCESS(UPDATE)

 SETROPTS CLASSACT(SERVAUTH) RACLIST(SERVAUTH) GENERIC(SERVAUTH)

 RDEFINE SERVAUTH CEA.* UACC(NONE)
 PERMIT CEA.* CLASS(SERVAUTH) ID(CFZSRV) ACCESS(READ)
 PERMIT CEA.CONNECT CLASS(SERVAUTH) ID(CFZSRV) ACCESS(READ)
 PERMIT CEA.SUBSCRIBE.ENF_0009* CLASS(SERVAUTH) ID(CFZSRV) +
 ACCESS(READ)
 PERMIT CEA.SUBSCRIBE.ENF_0027* CLASS(SERVAUTH) ID(CFZSRV) +
 ACCESS(READ)
 PERMIT CEA.SUBSCRIBE.ENF_0033* CLASS(SERVAUTH) ID(CFZSRV) +
 ACCESS(READ)

 SETROPTS RACLIST(FACILITY) REFRESH
 SETROPTS RACLIST(SERVAUTH) REFRESH
/*

This step permits the CIM server user ID to access CEA through the CIM live cycle indication providers for the Storage management classes as described in Storage management classes.

In particular a CIM user requires this permission to access the CIM providers for the following storage management classes:

This step defines the generic resource profile CEA.* and permits the default CIM server user ID CFZSRV access to it. For the case that you have already defined the specific resource profiles such as CEA.CONNECT, this step also permits the default CIM server user ID to these specific resource profiles. Depending on what you have actually defined, you can customize this job step to match your environment by removing obsolete commands.

For granting users a more fine-grained access to CIM, you may consider to define an additional group that grants access just for Storage management classes.