Keywords › GID Keyword—Assign a Group ID for USS Group Security

GID Keyword—Assign a Group ID for USS Group Security

Valid on z/OS and z/VM.

Use the GID keyword to assign a numeric group ID (GID) value to a group ACID for security within USS.

Note: You need administrative privileges to use this keyword.

The assigned GID is shared by one or more ACIDs by adding the GROUP to every ACID that is allowed to use it. GIDs can be explicitly assigned to a GROUP or automatically assigned within a numeric range by CA Top Secret. You can explicitly specify a range for the assignment, or you can accept the range default in the DFLTRNGG control option.

Important! After you add a GID to a group ACID, specify TSS MODIFY(OMVSTABS) to perform a refresh and allow the assignment to take effect. Attempting to use the GID assignment before an OMVSTABS refresh could interfere with the ACID's attempts to use USS services.

This keyword has the following format:

TSS ADDTO(acid) GID(uss_group_id)

TSS ADDTO(acid) GID(?)

             [RANGE(low_gid,high_gid)]

acid

Specifies the group ACID to which you are assigning a USS GID.

uss_group_id

Specifies a numeric GID to assign to the ACID. The GID is uniquely assigned to an ACID of type GROUP.

Range: 1 to 2147483647

?

Instructs CA Top Secret to automatically assign the USS GID. If you specify RANGE in the command, the product assigns the first unused positive integer that is greater than or equal to the low_gid value and less than or equal to the high_gid value. If you do not specify RANGE, the product assigns the first available integer in the range defined by DFLTRNGG control option.

Note: You cannot use the ? value with REMOVE.

If you are using the Command Propagation Facility (CPF) and CPFAUTOGID(YES), the TSS command is transmitted with the assigned GID value instead of the ? value (for example, TSS ADD(JONATHAN) GID(256) instead of TSS ADD(JONATHAN) GID(?)).

RANGE

Specifies a range from which the product will choose an available GID (if you have also specified ? in the command syntax to automatically assign a GID).

low_gid

Indicates the lowest assignable GID available to this ACID.

Range: 1 to 2147483647

high_gid

Indicates the highest assignable GID available to this ACID.

Range: 1 to 2147483647

This keyword is used with the commands ADDTO, REMOVE, REPLACE, WHOHAS, and WHOOWNS.

Example: Assign a GID to a Group ACID

This example assigns GID 93456 to GRPACID1:

TSS ADDTO(GRPACID1) GID(93456)

Note: After assigning the GID to the ACID, issue TSS MODIFY(OMVSTABS) for the assignment to take effect.

Example: Remove a GID Assignment from an ACID

This example removes the connection between a GID and an ACID:

TSS REMOVE(GPACID1) GID(93456)

Example: Automatically Assign a GID Through the DFLTRNGG Control Option

This example automatically assigns a number to an ACID (using an available integer in the default range defined by the DFLTRNGG control option):

TSS ADDTO(GPACID1) GID(?)

Example: Automatically Assign a GID By Using an Available Integer in a Range That You Specify

This example automatically assigns a number to an ACID in the inclusive range 10,000 to 200,000:

TSS ADDTO(GPACID1) GID(?)
                     RANGE(10000,200000)