Welcome
IBM Z Workload Scheduler
Welcome to the IBM Z Workload Scheduler documentation, where you can find information about how to install, maintain, and use the product. The documentation has been updated for version 10.2 SPE (Revised July 2025).
Customization and Tuning
Customizing IBM Z Workload Scheduler
Implementing security
This chapter explains how you use IBM Z Workload Scheduler security features to protect IBM Z Workload Scheduler functions and data.
Planning security implementation
Consider the tasks in this section when determining your security requirements.
Identifying users
RACF® controls the interaction between users and resources. You define resources and the level of access allowed by users to these resources in RACF profiles. A user is an alphanumeric user ID that RACF associates with the user.

Product requirements
This section contains links to the IBM® Workload Scheduler Download Documents, System Requirements, and Release Notes.
Product Library in PDF format
This section contains links to the PDF versions of all the publications provided in IBM Documentation for IBM Workload Automation.
Considerations for GDPR readiness
Overview
Mobile Applications Userʼs Guide
Dynamic Workload Console User's Guide
AI Data Advisor (AIDA) User's Guide
Scheduling Job Integrations with IBM Workload Automation
IBM® Workload Scheduler
Welcome to the IBM® Workload Scheduler documentation, where you can find information about how to install, maintain, and use IBM Workload Scheduler. The documentation has been updated for IBM Workload Scheduler Version 10.2.5.
IBM Z Workload Scheduler
Welcome to the IBM Z Workload Scheduler documentation, where you can find information about how to install, maintain, and use the product. The documentation has been updated for version 10.2 SPE (Revised July 2025).
- Memo to Users
- Program Directory
- Dynamic Workload Console Readmes
  For the latest information about a Dynamic Workload Console fix pack, see the appropriate Readme File.
- Planning and Installation
- Customization and Tuning
  - About this publication
  - Customizing IBM Z Workload Scheduler
    - Defining initialization statements
      The initialization statements determine the tasks that IBM Z Workload Scheduler starts, how IBM Z Workload Scheduler processes work, and the functions that you can use.
    - Identifying related initialization-statement parameters
    - Implementing security
      This chapter explains how you use IBM Z Workload Scheduler security features to protect IBM Z Workload Scheduler functions and data.
      - Planning security implementation
        Consider the tasks in this section when determining your security requirements.
        How IBM Z Workload Scheduler verifies access authority
        To verify access authority, IBM Z Workload Scheduler uses the RACROUTE macro. This macro has a general-purpose interface to a security product through the system authorization facility (SAF). The security product can be RACF® or any other product that works with SAF. In this chapter, RACF commands show how IBM Z Workload Scheduler interfaces with a security product.
        Identifying users
        RACF® controls the interaction between users and resources. You define resources and the level of access allowed by users to these resources in RACF profiles. A user is an alphanumeric user ID that RACF associates with the user.
        Establishing naming conventions for IBM Z Workload Scheduler resources
        Grouping RACF® users and resources
        General security considerations
      - Customizing TLS to connect components with IBM Z Workload Scheduler
      - Controlling access to IBM Z Workload Scheduler
      - Functions and data that you can protect
        You can use fixed resources and subresources to protect IBM Z Workload Scheduler functions and data.
      - Access requirements to fixed resources for dialog users
        To use an IBM Z Workload Scheduler dialog, you need the authority to access the required resources.
      - Examples of security strategies
    - IBM Z Workload Scheduler exits
      Read the following information to understand General-use Programming Interface and Associated Guidance Information. It describes exits that are called by IBM Z Workload Scheduler. Your own programs can use the information passed by the exits to perform a variety of functions.
    - Open Systems Integration
    - Reporting Events
    - Using the Job Completion Checker
    - Using the data store
    - Miscellaneous customization
  - Data integrity
  - Tuning
  - IBM Z Workload Scheduler macros
  - Sample library (SEQQSAMP)
- Managing the Workload
  You can plan when and how your workload runs and manage it as part of a plan.
- Scheduling End-to-end with z-centric Capabilities
- Quick Reference
- Diagnosis Guide and Reference
- Workload Automation Programming Language for z/OS User's Guide and Reference
- Driving IBM Z Workload Scheduler
Messages and Codes
Glossary
Notices

Identifying users

RACF® controls the interaction between users and resources. You define resources and the level of access allowed by users to these resources in RACF® profiles. A user is an alphanumeric user ID that RACF® associates with the user.

IBM Z Workload Scheduler needs access to non-IBM Z Workload Scheduler resources for the work it schedules. The user ID associated with IBM Z Workload Scheduler can be obtained from:

The IBM Z Workload Scheduler address space that accesses data sets used by the work it schedules, and that submits work and issues JES and z/OS commands.
The user= parameter on the JOB card of a batch job.
The IBM Z Workload Scheduler job-submit exit, EQQUX001, which is called when IBM Z Workload Scheduler is about to submit a job or start a started task, and which can pass back a user ID.
The USRREC statement, which specifies the name and password of the user on a supported Windows™ workstation.
The LOCALPSW statement, which specifies whether the name and password of a user on a Windows™ workstation is defined either on z/OS® using the USRREC statement (LOCALPSW set to NO) or on the Windows™ workstation using a local file (LOCALPSW set to YES). If you set LOCALPSW to YES, the scheduler looks for the USRREC statement first, then for the local file.
The USERMAP keyword of the SERVOPTS statement.

User IDs that access IBM Z Workload Scheduler resources can be:

A TSO user ID that accesses the IBM Z Workload Scheduler dialogs, submits batch jobs that access IBM Z Workload Scheduler resources, and issues IBM Z Workload Scheduler TSO commands.
An IBM Z Workload Scheduler address space, which must be permitted access to IBM Z Workload Scheduler resources.
Other started-task address spaces that pass requests to an IBM Z Workload Scheduler address space.
A user ID supplied by a transaction program (TP) that uses the IBM Z Workload Scheduler API to communicate with the Z controller.
A user ID defined by the USERMAP keyword of the SERVOPTS statement to work with Dynamic Workload Console.