On Tuesday, 11/25/2008 at 10:54 EST, Thomas Kern <[EMAIL PROTECTED]> wrote: > Since changes are a'coming.... > > I like the idea of a new DIRMAINT/ESM authorization > LGNBYGRP acigname1 acigname2 ...
I meant that changes in the ACI itself are coming that will require more changes to more things in the CP-resident code. But I have to respond to your request as "Available". RACF lets you: 1. Create a group of users. Permit the group to use LOGON BY to the desired set of target IDs. As you change the group membership, their ability to LOGON BY to all those target IDs changes. 2. Create a list of target of target IDs so that you can change the list of target IDs without have to do PERMITs. 3. Use both. Alan Altmark z/VM Development IBM Endicott