Previous Topic: AWADMIN Account

Next Topic: Configure the aws_sadmin Service

Security Requirements

Questions occasionally arise regarding the need to grant superuser privileges to user IDs that are used to run one or more of the z/OS-based agents. It is neither required, nor desired, for these IDs to hold this privilege. What is required however, is that these accounts must participate in the Agent Technology security group (default name, AWGROUP), as established in the Agent Technology installation process. Note that the zFS files are owned by the group AWGROUP once they are formatted during the install process. In addition, if you intend to run your agent as a started task, the Agent Technology security group must be the default group for the task's user ID.