On entry to the security exit, Register 1 points to a list of ten full words, as shown in this diagram.

The contents of the parameter list are as follows:
Is a full word containing the address of function code F'28'.
Is set to zero.
Is the address of an 8-character field, blank-padded, containing the name of the user ID to be updated.
Is the address of three full words containing the session correlator and the user token (UTOKEN) associated with the user issuing the request.
Is the address of an 8-character field containing the user ID of the user making the update request.
Is set to zero.
Is set to zero.
Is the address of an 82-character area into which the exit can place any error message text if the function request is denied or failed. Any text placed in this area is displayed to the user in response to the command that caused this request. If an error message is returned in this area it must be formatted as follows:
Specifies the hexadecimal length of the message text (excluding these two bytes).
Specifies the error message text. Error message text is converted to upper case.
Limits: 80 characters
Is set to zero.
Is set to the address of a list of full words, terminated by X'FFFFFFFF'. Each full word in this list in turn points to a structured field that defines an item of user ID information that is to be changed.
The exit must return a completion code in Register 15 on return. Completion codes are supported as described below. Causes for update rejection are identified by error message text returned in the area addressed by word 8 of the Update Call parameter list.
The return codes listed below are the only codes that are accepted in response to an Update Call. Any other return code is regarded as update rejected.
Indicates that update has completed.
Indicates that update is rejected. An error message might be available in the 80-character area addressed by word 8 of the parameter list.