Sasan, If the SDBM backend provides a means by which to issue a TSO command to create the alias, you can give that userid "READ" access to resource ID "STGADMIN.IGG.DEFDEL.UALIAS" which will permit the SDBM backend to create and delete aliases to user catalogs without permitting the SDBM backend "UPDATE" access to the ICF master catalog.
John P. Baker -----Original Message----- From: IBM Mainframe Discussion List <[email protected]> On Behalf Of Sasan Mirkhani Sent: Wednesday, May 22, 2019 1:41 PM To: [email protected] Subject: Automatic Alias Creation Hi list, We're currently provisioning RACF IDs using the Tivoli Directory Server (LDAP SDBM backend). For IDs that are defined with TSO segment we need to figure out a way to automatically create an ALIAS. What would be the best way to go about this? I've thought about doing it in our LOGON PROC, however that would require users to have UPDATE access to the master catalog which we would like to avoid. How else can we go about this? Thanks ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
