UACC(NONE) Use wildcards to reduce the number of profiles.
You may want to restrict who can use which commands. -- Shmuel (Seymour J.) Metz http://mason.gmu.edu/~smetz3 עַם יִשְׂרָאֵל חַי נֵ֣צַח יִשְׂרָאֵ֔ל לֹ֥א יְשַׁקֵּ֖ר ________________________________________ From: IBM Mainframe Discussion List <[email protected]> on behalf of Colin Paice <[email protected]> Sent: Sunday, June 29, 2025 12:29 PM To: [email protected] <[email protected]> Subject: setting up user and operator commands. External Message: Use Caution I'm struggling to understand the set up for userid and console permissions, I can specify a console-name for example z/OSMF https://secure-web.cisco.com/1z5TmnlzxBv5YYgihLr4Swuz2PE7RhjmeC29rMU0zQAqhDCK0rnjZkfCr6sEUxjpA4q7BdFH8umqugQD3WW2jMmp3iluAVDshTkAgiNYflKpaNdlGkvaAoRDpFSfZSXFzjBOf3bBXS0KyomdLJ-Tb2P67kqCtbwMEHHDPTxgp_5lLrmAW4-DGD6B3yLcsxs6XPrsPmLn1xoV8H5xhYb1g3_w4XF08NFVV41eXhMjqI1JFQG1oGPMpMpVsBT_WGE559tSi7n0LBmxVBD3yKw-5bHf2JKsFJuGBAMfCNjYhX5-eX2i9ktmZdzegJCuOFOax2deDsAMqb7lpOZrInbpV6sUS0IJ6cxAEun8KUIJdZXuIO3Y6sEo2E711ldGe2QN3AL4PMZcixXftHeq8oTk1_w1TGl__6_xvSUCmfjgQAqs/https%3A%2F%2F10.1.1.2%3A10443%2Fzosmf%2Frestconsoles%2Fconsoles%2F*EMCS003*, or the TSO command CONSOLE NAME(*EMCS003*). My userid needs read access to the profile MVS.MCSOPER.EMCS003. As I read the documentation the console name is not important - it does not contain any configuration information it is just a name. I could create a console-name COLIN1, and give only userid COLIN access to it. This stops other people trying to use COLIN1. If other people had access to it I might get "COLIN1" in use. Am I missing something? ______________________ The documentation for Extended MCS user, implies an EMCS is different to a userid. Defining the user profile of an extended MCS console <https://www.ibm.com/docs/en/zos/3.1.0?topic=racf-defining-user-profile-extended-mcs-console#racuse> It feels like an EMCS is just an existing TSO userid. The doc says an EMCS userid needs to have an OPERPARM segment. My userid doesnt have this segment, and I can still use TSO CONSOLE command, and cancel jobs etc. The doc <https://www.ibm.com/docs/en/zos/3.1.0?topic=consoles-defining-console-attributes-extended-mcs> implies the default AUTH(INFO) so I should not be able to cancel jobs. Is there a good write up on EMCS ? Colin ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
