UID Keyword—Assign a User ID to a USS User

Keywords › UID Keyword—Assign a User ID to a USS User

UID Keyword—Assign a User ID to a USS User

Valid on z/OS and z/VM.

Use the UID keyword to assign a numeric user ID (UID) value to each user for security within USS. You can assign UID(0) (to gives the user superuser privileges) or you can assign a unique positive number to the ACID. You can explicitly specify a range for the assignment, or you can accept the range default in the DFLTRNGU control option.

Important! After you add a UID to an ACID, specify TSS MODIFY(OMVSTABS) to perform a refresh and allow the assignment to take effect. Attempting to use the UID assignment before an OMVSTABS refresh could interfere with the ACID's attempts to use USS services.

This keyword has the following format:

TSS ADDTO(acid) UID(USS_user_id)

TSS ADDTO(acid) UID(?)
              [RANGE(low_uid,high_uid)]

acid

Specifies the ACID to which you are adding a USS UID.

USS_user_id

Specifies the numeric user ID to assign to the ACID. UID 0 has special meaning (“superuser”) and can be assigned to multiple ACIDs.

Important! You can assign a specific UID to only one specific ACID. For example, only USERX can be assigned UID 8.

Range: 0 to 2147483647

?

Instructs CA Top Secret to automatically assign the USS UID. If you specify RANGE in the command, the product assigns the first unused positive integer that is greater than or equal to the low_uid value and less than or equal to the high_uid value. If you do not specify RANGE, the product assigns the first available integer in the range defined by DFLTRNGU control option.

Note: You cannot use the ? value with REMOVE.

If you are using the Command Propagation Facility (CPF) and CPFAUTOUID(YES), the TSS command is transmitted with the assigned UID value instead of the ? value (for example, TSS ADDTO(JONATHAN) UID(256) instead of TSS ADDTO(JONATHAN) UID(?)).

Note: For complete information about the CPFAUTOUID control option, see the CA Top Secret Control Options Guide.

RANGE

Specifies a range from which the product will choose an available UID (if you have also specified ? in the command syntax to automatically assign a UID).

low_uid

Indicates the lowest assignable UID available to this ACID.

Range: 1 to 2147483647

high_uid

Indicates the highest assignable UID available to this ACID.

Range: 1 to 2147483647

This keyword is used with:

The commands ADDTO, REMOVE, REPLACE, WHOHAS, and WHOOWNS
The ACID types SCA, LSCA, ZCA, VCA, DCA, and User
ACID(MAINTAIN) authority

Example: Assign a Specific UID to an ACID

This example indicates that user ACID USER02 has a UID of 83234:

TSS ADDTO(USER02) UID(83234)

Example: Remove a UID Assignment from an ACID

This example removes the connection between a UID and an ACID:

TSS REMOVE(USER02) UID(83234)

Example: Automatically Assign a UID Through the DFLTRNGU Control Option

This example automatically assigns a number to an ACID (using an available integer in the default range defined by the DFLTRNGU control option):

TSS ADDTO(johndoe) UID(?)

Example: Automatically Assign a UID By Using an Available Integer in a Range That You Specify

This example automatically assigns a number to an ACID within the inclusive range 10,000–200,000:

TSS ADDTO(johndoe) UID(?)
                   RANGE(10000,200000)