IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Select users/groups with a CSDATA segment

    Posted 05/20/24 10:38 AM

    Could I manage or list users/groups by it's CSDATA segment with Zsecure Visual. We only have the zsecure visual, we don't have the zsecure admin.

    Thanks in advance



    ------------------------------
    David Rodrigo Moreno
    ------------------------------



  • 2.  RE: Select users/groups with a CSDATA segment

    Posted 05/21/24 05:01 AM

    Hi David,

    The Find user dialog (Figure 3 / Figure 29 in the PDF) at the bottom of the "User table" topic shows a selection for Segment:
    https://www.ibm.com/docs/en/szs/3.1.0?topic=management-user-table
    (This is right before the "Viewing user properties" topic.)

    Likewise for groups: https://www.ibm.com/docs/en/szs/3.1.0?topic=management-group-table

    I hope this helps.


    Regards,



    ------------------------------
    Jeroen Tiggelman
    IBM - Software Development Manager IBM Security zSecure Suite
    Delft
    ------------------------------



  • 3.  RE: Select users/groups with a CSDATA segment

    Posted 05/21/24 05:42 AM
    Edited by Tom Zeehandelaar 05/21/24 05:42 AM

    Hi David, 

    Jeroen's response is correct in the sense that zSecure Visual supports the selection of user and group profiles for which a CSDATA segment is defined in the profile through the find dialog as indicated. But the initial resulting display will not show any information about the custom fields in the CSDATA segment of the selected profiles.

    However, when you right-click a selected profile, you can select the action 'Segments' to access the defined segments for the involved profile.


    When you select he CSDATA segment in the left pane, the display shows the defined custom fields, and the current assigned value (if any). From here, you can add, change, or delete custom fields for the selected user/group.

    I hope this helps. 

    -----------------------------
    Tom Zeehandelaar
    z/OS Security Enablement Specialist - zSecure developer
    IBM
    ------------------------------

    Original Message


  • 4.  RE: Select users/groups with a CSDATA segment

    Posted 05/21/24 07:21 AM

    The problem is that the CSDATA segment does not appear for selection. We have defined a field in the CFIELD class (DNI) and through RACF panels the CSDATA segment appears, but not in zsecure visual.

    If I do an RLIST CFIELD * CFDEF NORACF

    CLASS      NAME            

    -----      ----            

    CFIELD     USER.CSDATA.DNI 

                                

    CFDEF INFORMATION          

    -----------------          

    TYPE = CHAR                

    MAXLENGTH = 00000009       

    MAXVALUE = NONE            

    MINVALUE = NONE            

    FIRST = ALPHANUM           

    OTHER = ALPHANUM           

    MIXED = NO                 

    HELP = CAMPO DNI USUARIO   

    LISTHEAD = DNI=            

    List user:

    USER=CCSIS19        

                         

    CSDATA INFORMATION  

    ------------------  

    DNI= 222222         

    Maybe we need to define a profile in RACF?

    Thanks in advance



    ------------------------------
    David Rodrigo Moreno
    ------------------------------

    Original Message


  • 5.  RE: Select users/groups with a CSDATA segment

    Posted 05/21/24 09:20 AM

    Hi there,

    Yes, you can manage or list users/groups by their CSDATA segment using Zsecure Visual. While you don't have the full capabilities of zSecure Admin, you can still achieve this by creating custom queries within Zsecure Visual. Here's a quick guide:

    1. Open Zsecure Visual and go to the "Query" tab.
    2. Create a new query and set it to filter for the CSDATA segment.
    3. Specify the criteria for the users/groups you want to list.
    4. Run the query to generate your list.


    ------------------------------
    thomas vick
    ------------------------------



  • 6.  RE: Select users/groups with a CSDATA segment

    Posted 05/22/24 06:19 AM

    Problem solved.
    The CSDATA segment is now displayed. We had to update each partition of the sysplex, with the command IRRDPI00 UPDATE.

    Thank you all for your help.



    ------------------------------
    David Rodrigo Moreno
    ------------------------------

    Original Message


Related Content