Controlling access to HCL Workload Automation for Z

HCL Workload Automation for Z security involves three levels of protection:
  • The HCL Workload Automation for Z subsystem determines if a user can establish communication with HCL Workload Automation for Z.
  • Fixed resources protect functions in HCL Workload Automation for Z; for example, modifying the current plan or requesting a backup of a resource data set.
  • Subresources protect HCL Workload Automation for Z data.

The level of access given to a user at one level determines the default access that the user has at remaining levels. For example, if a user has update access to the HCL Workload Automation for Z subsystem, then that user has, by default, update access to all fixed resources. A user's access to fixed resources in turn determines the default access to subresources. The default value is used when a resource has not been specifically protected.

If you use the HCL Workload Automation for Z API, you can also use the security functions of APPC to protect access to the controller. See Controlling access to HCL Workload Automation for Z from APPC, for more information.

Carefully review your security requirements, and specify the levels of protection that you require. Do not specify extra levels of protection if they are not needed.