The ISPF administration interface performs a security check on all the requests that you make to access data in a CICS region control file (for example, update a CICS region's properties, display a list of the file objects in a control file, or save a modified application group). The security checking is performed by the ISPF administration interface using standard z/OS System Authorization Facility (SAF) calls. This means that you can use any security manager that conforms to the standard SAF interface. See CICS BAC security for more information about CICS BAC security checking.
CICS BAC ISPF administration interface security is based on the resource name classifications described in topic CICS BAC resource names, where accesstype is ADMIN, and objectType and objectName are those associated with access type ADMIN. See Administrative object types and object names for more information.