Universal Control Manager Security

File Permissions

Only trusted user accounts should have write permission to the Universal Control Manager installation directory and subdirectories, and all of the files within them. This most likely means that only the administrator group should have write access.

Eligible users of Universal Control require read access to the message catalogs (*.umc files) in the NLS directory.
 

HP NonStop

Eligible users of Universal Control require read access to the message catalogs in the $SYSTEM.UNVNLS subvolume.

Windows

Eligible users of Universal Control require read access to the message catalogs (*.umc files) in the nls subdirectory of the Universal Agent installation directory. If Universal Control Manager is installed on an NTFS partition, these file permissions are set automatically during the installation.

z/OS

Data set permissions: Eligible users of Universal Control require read access to:

  • National language support library SUNVNLS
  • Load library SUNVLOAD

Configuration Files

Only trusted user accounts should have write access to the Universal Control Manager configuration files.
 

Windows

Although you can edit configuration files with any text editor (for example, Notepad), we recommend that you manage configuration options using the Universal Configuration Manager Control Panel application. Only user accounts in the Administrator group can execute the Universal Configuration Manager.

RACF Protection

 

z/OS

The Universal Control Manager for z/OS verifies a user's access to a RACF general resource profile. The resource profile controls a user's access to execute a control request on a remote host.
 
See the Configuration of Security for complete details on installing and administering Universal Control Manager RACF profiles.