Cisco Cisco Workload Automation 6.3 User Guide

Configuring the z/OS Agent

Configuring the z/OS Agent

Preventing Unauthorized Users from Using an Agent

The z/OS agent can be configured to allow only specific users to run jobs on that agent. A list of users can be created 
to exclude or allow users access to the agent. If an unauthorized user tries to run a job on an agent that he is excluded 
from, the job will end with an 

status.

Login as the owner of the agent.

Create a file called Users.cfg in the agent’s root directory (If the defaults were used during installation, the root 
directory is at 

.

The file name, Users.cfg, is case sensitive, so only the first letter should be capitalized and the rest of the name 

should be lower-case.

Change the Users.cfg file permissions to limit access to just the agent owner, by entering:

chmod 700 Users.cfg

In the Users.cfg file, enter:

EXCLUDE

List the users that you want to deny access to the agent.

An alternative method if the list of users to exclude is long, is to enter 

INCLUDE instead of EXCLUDE. Then you can 

list the users to give access to the agent if this is easier.

To ensure that the changes take effect, you should stop and restart the agent or if you do not want to stop the agent, 
you can disconnect and reconnect the Client Manager connection to the agent.

While this procedure prevents unauthorized users from running system commands on an agent they are excluded 

from, FTP jobs can still be run from the agent because an user does not login to an agent to FTP.

Configuring Agent Settings

Other agent settings are available in the tagent.ini file located within the 

 directory of the agent directory, e.g., 

These settings are normally left at the default values and do not appear in the file 

unless a setting is modified from the default. If the settings are modified, each setting must be on its own line. The 
configuration settings under the 

 heading of the tagent.ini file apply globally to all agent instances. Under the