System Installation Choices › TSO Analysis

TSO Analysis

The time sharing option (TSO) is a standard feature of z/OS. Two access methods handle communication between TSO and the terminal: the telecommunications access method (TCAM), also known as TSO/TCAM, or the virtual telecommunications access method (VTAM) also known as TSO/VTAM.

The user attributes data set (UADS) lists each user that is authorized to use TSO. UADS is a partitioned data set (PDS). Each member of UADS identifies an individual TSO user and includes the user’s identity, password, account number, and logon procedure. Usually, this data set is named SYS1.UADS. A data center can rename the UADS data set, but z/OS requires that UADS be defined in the MASTER JCL. CA Auditor reviews the Master Task Input/Output Table (TIOT) to locate the UADS ddname.

UADS is not automatically password-protected, nor is the information encrypted. Anyone with proper access authority can read and modify UADS. Normally, the data center assigns a password to the UADS data set, but this password must be assigned explicitly. You should review the Usage Guide to learn more about UADS.

UADS is important because it defines the powers granted to each TSO user on the system. The TSO Analysis screen shows you all of the TSO user IDs on your system, the attributes of each user ID, and a map of the password, account, and procedure information for each user ID.

To analyse the TSO

1. From the Primary Menu, select option 2.

   The System Installation Choices screen is displayed.

2. Select option 4.

   The Key z/OS Libraries submenu is displayed.

3. Select option 5 (2.5).

   The TSO Analysis screen is displayed.

4. To map the password, account, and procedure information for a user, enter an S (Select) next to that user ID.
5. To display information about a user ID, enter S (Select) next to that user ID.

   The TSO PSWD/ACCT/PROC screen is displayed.