I agree with Rich on PRIVCLASS A and "oops". In this economy, management is less inclined to let a little slip like shutting down your production system hosting myriad web servers because you though you were shutting down a 2nd level system or an application or program product that unfortunately ends with "SHUTDOWN".
To answer his question "Yes, there are other commands that are class A only, but can you even name them much less ever used them?)", in two parts: Name them? With help of the CMDTABLE EXEC what was published here years ago, yes (results truncated on the right to prevent showing any other classes they work with): ACNT IBMCLASS=A ASSOCIATE IBMCLASS=A AUTOLOG IBMCLASS=A CPACCESS IBMCLASS=A CPCACHE IBMCLASS=A CPHX IBMCLASS=A CPLISTFILE IBMCLASS=A CPRELEASE IBMCLASS=A CPTYPE IBMCLASS=A CPXLOAD IBMCLASS=A CPXUNLOAD IBMCLASS=A DEDICATE IBMCLASS=A DEFINE IBMCLASS=A DISABLE IBMCLASS=A DISASSOCIATE IBMCLASS=A ENABLE IBMCLASS=A FORCE IBMCLASS=A HALT IBMCLASS=A HYPERSWAP IBMCLASS=A LOCK IBMCLASS=A MESSAGE IBMCLASS=A MIGRATE IBMCLASS=A MODIFY IBMCLASS=A MONITOR IBMCLASS=A NETWORK IBMCLASS=A PURGE IBMCLASS=A QUERY SUBCMD CAPABILITY IBMCLASS=A QUERY SUBCMD CFLINKS IBMCLASS=A QUERY SUBCMD CHANNEL IBMCLASS=A QUERY SUBCMD CMDLIMIT IBMCLASS=A QUERY SUBCMD CPASSIST IBMCLASS=A QUERY SUBCMD CPCHECKING IBMCLASS=A QUERY SUBCMD CPCMDS IBMCLASS=A QUERY SUBCMD CPDISKS IBMCLASS=A QUERY SUBCMD CPLOAD IBMCLASS=A QUERY SUBCMD CPTRACE IBMCLASS=A QUERY SUBCMD CPXLOAD IBMCLASS=A QUERY SUBCMD CRYPTO IBMCLASS=A QUERY SUBCMD DIAGNOSE IBMCLASS=A QUERY SUBCMD D8ONECMD IBMCLASS=A QUERY SUBCMD EXITS IBMCLASS=A QUERY SUBCMD FRAMES IBMCLASS=A QUERY SUBCMD ICLNAME IBMCLASS=A QUERY SUBCMD IMG IBMCLASS=A QUERY SUBCMD IOPRIORITY IBMCLASS=A QUERY SUBCMD IPLPARMS IBMCLASS=A QUERY SUBCMD JOURNAL IBMCLASS=A QUERY SUBCMD LOGMSG IBMCLASS=A QUERY SUBCMD MAXUSERS IBMCLASS=A QUERY SUBCMD MITIME IBMCLASS=A QUERY SUBCMD MONITOR IBMCLASS=A QUERY SUBCMD NAMES IBMCLASS=A QUERY SUBCMD OBSERVER IBMCLASS=A QUERY SUBCMD PAGING IBMCLASS=A QUERY SUBCMD PRIORITY IBMCLASS=A QUERY SUBCMD PROCESSORS IBMCLASS=A QUERY SUBCMD QDROP IBMCLASS=A QUERY SUBCMD QUICKDSP IBMCLASS=A QUERY SUBCMD RECORDING IBMCLASS=A QUERY SUBCMD RESERVED IBMCLASS=A QUERY SUBCMD SASSIST IBMCLASS=A QUERY SUBCMD SDF IBMCLASS=A QUERY SUBCMD SECUSER IBMCLASS=A QUERY SUBCMD SHARE IBMCLASS=A QUERY SUBCMD SHUTDOWNTIME IBMCLASS=A QUERY SUBCMD SPMODE IBMCLASS=A QUERY SUBCMD SRM IBMCLASS=A QUERY SUBCMD STGEXEMPT IBMCLASS=A QUERY SUBCMD STGLIMIT IBMCLASS=A QUERY SUBCMD S370E IBMCLASS=A QUERY SUBCMD TRACEFRAMES IBMCLASS=A QUERY SUBCMD TRFILES IBMCLASS=A QUERY SUBCMD TRSAVE IBMCLASS=A QUERY SUBCMD TRSOURCE IBMCLASS=A QUERY SUBCMD UCR IBMCLASS=A QUERY SUBCMD UNRESOLVED IBMCLASS=A QUERY SUBCMD VECTOR IBMCLASS=A QUERY SUBCMD VMSAVE IBMCLASS=A QUERY SUBCMD VTOD IBMCLASS=A QVM IBMCLASS=A RECORDING IBMCLASS=A REFRESH IBMCLASS=A RESTART IBMCLASS=A SET SUBCMD ADJUNCTS IBMCLASS=A SET SUBCMD CFLINK IBMCLASS=A SET SUBCMD CPASSIST IBMCLASS=A SET SUBCMD CPCHECKING IBMCLASS=A SET SUBCMD CPTRACE IBMCLASS=A SET SUBCMD D8ONECMD IBMCLASS=A SET SUBCMD FAVORED IBMCLASS=A SET SUBCMD IOPRIORITY IBMCLASS=A SET SUBCMD IPLPARMS IBMCLASS=A SET SUBCMD JOURNAL IBMCLASS=A SET SUBCMD MAXUSERS IBMCLASS=A SET SUBCMD MITIME IBMCLASS=A SET SUBCMD MODE IBMCLASS=A SET SUBCMD OBSERVER IBMCLASS=A SET SUBCMD PAGING IBMCLASS=A SET SUBCMD PRIORITY IBMCLASS=A SET SUBCMD QUICKDSP IBMCLASS=A SET SUBCMD QDROP IBMCLASS=A SET SUBCMD RESERVED IBMCLASS=A SET SUBCMD SASSIST IBMCLASS=A SET SUBCMD SECUSER IBMCLASS=A SET SUBCMD SHARE IBMCLASS=A SET SUBCMD SHUTDOWNTIME IBMCLASS=A SET SUBCMD SIGNAL IBMCLASS=A SET SUBCMD SRM IBMCLASS=A SET SUBCMD STGEXEMPT IBMCLASS=A SET SUBCMD STGLIMIT IBMCLASS=A SET SUBCMD SYSOPER IBMCLASS=A SET SUBCMD S370E IBMCLASS=A SET SUBCMD TIMEZONE IBMCLASS=A SET SUBCMD TRACEFRAMES IBMCLASS=A SET SUBCMD VMSAVE IBMCLASS=A SET SUBCMD VTOD IBMCLASS=A SHUTDOWN IBMCLASS=A SIGNAL IBMCLASS=A SNAPDUMP IBMCLASS=A SPMODE IBMCLASS=A SYNCMDRS IBMCLASS=A TRSAVE IBMCLASS=A UNDEDICATE IBMCLASS=A UNLOCK IBMCLASS=A WARNING IBMCLASS=A XAUTOLOG IBMCLASS=A XLINK IBMCLASS=A Have I ever used them? Well... some of them quite often, e.g. AUTOLOG/XAUTOLOG, DEFINE (mdisk), SIGNAL, many of the Query commands, etc. Others, "not so much". Rich probably forgets because most experienced sysprogs eventually give in to modifying privclasses for commands that they frequently need, or need infrequently but urgently when things go bump in the dark. Mike Walter Hewitt Associates The opinions expressed herein are mine alone, not my employer's. "Rich Greenberg" <ric...@panix.com> Sent by: "The IBM z/VM Operating System" <IBMVM@LISTSERV.UARK.EDU> 02/04/2010 03:55 PM Please respond to "The IBM z/VM Operating System" <IBMVM@LISTSERV.UARK.EDU> To IBMVM@LISTSERV.UARK.EDU cc Subject Re: Hi everybody On: Thu, Feb 04, 2010 at 10:34:08AM -0800,Howard Rifkind Wrote: } Just curious about you comment in this post about not liking } to even have user maint have an ?A? class privilege. Just 40 years of sysprogging with the occasional "O SHIT!!!!" happening. About the only thing you lose without class A is SHUTDOWN, and at systems I controlled, only ORERATOR and its cohorts had class A. (Yes, there are other commands that are class A only, but can you even name them much less ever used them?) -- Rich Greenberg N Ft Myers, FL, USA richgr atsign panix.com + 1 239 543 1353 Eastern time. N6LRT I speak for myself & my dogs only. VM'er since CP-67 Canines:Val, Red, Shasta & Casey (RIP), Red & Zero, Siberians Owner:Chinook-L Retired at the beach Asst Owner:Sibernet-L The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
