Keywords › SUSPEND Keyword—Prevent Access after Violation

SUSPEND Keyword—Prevent Access after Violation

Valid on z/OS, z/VSE and z/VM.

Use the SUSPEND keyword to prevent ACIDs from accessing the system when a violation occurs.

Add the FOR or UNTIL keywords onto a SUSPEND entry to limit the number of days the suspension is enforced. When SUSPEND is used with FOR or UNTIL, the TSS LIST output for the suspended ACID contains the following content:

SUSPEND =  UNTIL mm/dd/yy

Until an administrator removes the suspension (through the ASUSPEND keyword), the TSS LIST output for the suspended ACID contains the aforementioned text until the ACID completes a successful signon.

Issuing the ADDTO command to suspend a signed-on ACID automatically triggers a type 71 RACF Event Notifications (ENF) signal, which provides notification about the change to the ACID’s security record. Applications that receive the signal can take action (for example, refreshing the user's security record in a CICS remote (AOR) region, thereby suspending the ACID immediately).

This keyword has the following format:

TSS ADDTO(acid) SUSPEND

This keyword is used with:

• The commands CREATE, ADDTO, and REMOVE
• The ACID types User, DCA, VCA, ZCA, LSCA, SCA, and MSCA
• MISC1(SUSPEND) authority

  Administrators who do not have MISC1(SUSPEND) authority can add a SUSPEND to users within their scope if given UPDATE access to entity TSSCMD.USER.ADDTO.SUSPEND in the CASECAUT resource class

  Administrators who do not have MISC1(SUSPEND) authority can remove a SUSPEND from users within their scope if given UPDATE access to entity TSSCMD.USER.REMOVE.SUSPEND in the CASECAUT resource class

Example: Remove a Temporary Suspension

This example removes a temporary SUSPEND (SUSPEND UNTIL(DATE)):

TSS REMOVE(ACARP) ASUSPEND
                  UNTIL

Example: Remove the SUSPEND Attribute from an ACID

This example removes the SUSPEND attribute from an ACID (or unsuspends an ACID that was automatically suspended due to a violation):

TSS REMOVE(ACARP) SUSPEND

The command removes password suspensions, installation exit suspensions, and violation suspensions.

Example: Suspend an ACID for Five Days

This example suspends USER01 for five days.

TSS ADDTO(USER01) SUSPEND FOR(5)

Example: Suspend an ACID Until a Specific Date

This entry suspends USER01 until December 17, 2017.

TSS ADDTO(USER01) SUSPEND UNTIL(12/17/17)

Note: If an ACID is suspended administratively, the ASUSPEND keyword must be used to remove the suspension

More information:

ASUSPEND Keyword—Remove Suspension