Set Up USS Authorization for Users

Setting Up CA CSM › Security Setup for Users › Set Up USS Authorization for Users

Set Up USS Authorization for Users

CA CSM users require access to USS. Each user must have an OMVS segment. Your security administrator must set up these segments.

Follow these steps:

Select an OMVS UID number to associate with each user ID. Your security administrator can have a policy for assigning OMVS UID numbers. If not, use a unique number.
Note: For more information about OMVS UID numbers, see the IBM UNIX System Services Planning.
Define the OMVS segment for the user. For a user ID uuuuuuu, UID number nnn, and home directory path_name, enter the following commands:
- For CA ACF2 for z/OS systems, enter the following commands:
```
SET PROFILE(USER) DIV(OMVS)
INSERT uuuuuuu UID(nnn) HOME(path_name) OMVSPGM(/bin/sh)
```
- For CA Top Secret for z/OS systems, enter the following commands:
```
TSS ADD(uuuuuuu) HOME(path_name) OMVSPGM(/bin/sh) UID(nnn)
GROUP(ggggggg)    
```
- For the IBM RACF systems, enter the following command:
```
ALU uuuuuuu OMVS(UID(nnn) HOME(path_name) PROGRAM(/bin/sh))
```
Note: The OMVS segment must contain the following components:
- A home directory (HOME)
- A login shell (PROGRAM or OMVSPGM)
Ensure that you have completed this process for each user ID that you want to authorize. To confirm the contents of the OMVS segment, enter the following commands:
- For CA ACF2 for z/OS systems, enter the following commands:
```
SET PROFILE(USER) DIV(OMVS)
LIST uuuuuu
```
- For CA Top Secret for z/OS systems, enter the following command:
```
TSS LIST(uuuuuu) DATA(ALL)
```
- For the IBM RACF systems, enter the following command:
```
LISTUSER uuuuuu OMVS NORACF
```
Select a home directory to associate with each user ID. Ensure that it exists and that the UID has read/write access to it.
You can use the UNIX directory (path_name), as shown in Step 2, or you can use a customized home directory name.

For example, to set up a directory that is named /u/name for UIDnnn, issue the following commands in the OMVS UNIX shell:
```
mkdir /u/name
chown nnn /u/name
chmod 775 /u/name
```
Confirm the owner and access to the directory by using the following command:
```
ls -ld /u/name
```
The following result appears:
```
drwxrwxr-x   2 user  group  8192 Sep  31 14:58 /u/name
```