I'm struggling to understand the set up for userid and console permissions, I can specify a console-name for example z/OSMF https://10.1.1.2:10443/zosmf/restconsoles/consoles/*EMCS003*, or the TSO command CONSOLE NAME(*EMCS003*).
My userid needs read access to the profile MVS.MCSOPER.EMCS003. As I read the documentation the console name is not important - it does not contain any configuration information it is just a name. I could create a console-name COLIN1, and give only userid COLIN access to it. This stops other people trying to use COLIN1. If other people had access to it I might get "COLIN1" in use. Am I missing something? ______________________ The documentation for Extended MCS user, implies an EMCS is different to a userid. Defining the user profile of an extended MCS console <https://www.ibm.com/docs/en/zos/3.1.0?topic=racf-defining-user-profile-extended-mcs-console#racuse> It feels like an EMCS is just an existing TSO userid. The doc says an EMCS userid needs to have an OPERPARM segment. My userid doesnt have this segment, and I can still use TSO CONSOLE command, and cancel jobs etc. The doc <https://www.ibm.com/docs/en/zos/3.1.0?topic=consoles-defining-console-attributes-extended-mcs> implies the default AUTH(INFO) so I should not be able to cancel jobs. Is there a good write up on EMCS ? Colin ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
