Configuring the Broker and Server › Broker and Server Communication › z/OS Agent Start Options › The USS User ID

The USS User ID

To execute a single-user agent, a valid USS user ID must be defined. The user ID must have a unique uid assigned to the user name such that the whoami command returns the login name. If the user ID is defined with the USS default uid, an error occurs when the user attempts to start the agent. The user must also have READ access to the following IBM Facility: BPX.DAEMON.

To start the multi-user agent, a user must have a valid USS user ID that can act as root. The user must be able to execute the extattr command to APF authorize the agent executable and the dlls. READ access to the following IBM Facilities is required:

BPX.DAEMON 
BPX.FILEATTR.APF 
BPX.FILEATTR.PROGCTL 
BPX.SUPERUSER

For eTrust CA‑Top Secret, the following commands must be applied to a user ID to start a multi-user agent:

TSS PER(userid) IBMFAC(BPX.DAEMON) ACCESS(READ)
TSS PER(userid) IBMFAC(BPX.FILEATTR.APF ) ACCESS(READ)
TSS PER(userid) IBMFAC(BPX.FILEATTR.PROGCTL) ACCESS(READ)
TSS PER(userid) IBMFAC(BPX.SUPERUSER ) ACCESS(READ)