ALL LNXADMIN * 140A ADGHOPS  ALL LNXADMIN * 150A ADGHOPS  ALL MAINT710 * 140A ADGHOPS  ALL MAINT710 * 150A ADGHOPS  ALL MAINT * 140A ADGHOPS  ALL MAINT * 150A ADGHOPS  ALL VSMGUARD * 140A ADGHOPS  ALL VSMGUARD * 150A ADGHOPS  ALL VSMWORK1 * 140A ADGHOPS  ALL VSMWORK1 * 150A ADGHOPS  ALL VSMWORK2 * 140A ADGHOPS  ALL VSMWORK2 * 150A ADGHOPS  ALL VSMWORK3 * 140A ADGHOPS  ALL VSMWORK3 * 150A ADGHOPS  ALL EDI * 140A ADGHOPS  ALL EDI * 150A ADGHOPS  Figure 6-1 Administrators who are authorized in DirMaint The  AUTHFOR CONTROL  file specifies which VMs include the authority to modify the  characteristics of other VMs on the system. This authority can be limited to specific target  VMs or to specific attributes of a target VM. This authority is implemented by using DirMaint  command sets. The format of this file is column-specific. The  RPWLIST DATA  file is on the MAINT 2CC minidisk. When installing DIRMAINT, link and  access this disk and copy this file to the 11F disk that is owned by DIRMAINT. It can be used  to disable passwords that you deem to be trivial. The  EXTENT CONTROL  file defines disks (volumes) to DirMaint for minidisk allocation. It also  contains system and device default values that are used during allocation operations. The  following sections must be populated: Note:  For more information about DIRMAINT, see  Directory Maintenance Facility Tailoring  and Administration Guide , SC24-6283. RACF can coexist with the DirMaint product installed. However, to avoid dual maintenance of  password processing (and other RACF functions), complete the following steps: 1. Use the DirMaint supplied sample file  CONFIGRC SAMPDVH . You must copy this file to the  7VMDIR10 11F disk as  CONFIGRC DATADVH .  GLYPH<SM590000> Groups define pools of disks so that the  AUTOG  keyword can be used to take space from  the pools, not from specific disks. GLYPH<SM590000> Regions define the actual disks and their sizes to DirMaint. The  AUTOR  keyword can be  used in user directory entries to take space from the regions. As a preferred practice, the  region name and volume label always should be identical. RPWLIST DATA EXTENT CONTROL  DirMaint-RACF Connector Chapter 6. Securing a cloud in an IBM z/VM environment  161