Resources › OPCMD Resource Class—Secure SVC 34 Commands

OPCMD Resource Class—Secure SVC 34 Commands

Valid on z/OS.

Use OPCMD to secure system operator commands issued by programs using SVC 34. For example, SDSF, TSO, OPER, or other installation‑written programs.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) OPCMD(prefix(es))

Prefix length

One to eight characters

Capacity of list

One to five prefixes per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) OPCMD(prefix(es))

Prefix length

One to eight characters

Capacity of list

One to five prefixes per TSS command

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
• The OPCMD ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The OPCMD ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• OPCMD(OWN) authority to ADD or REMOVE ownership of OPCMDs from ACIDs
• OPCMD(XAUTH) authority to permit or revoke the use of OPCMDs

The administrator can use any of the following methods to control access to the OPCMD resource: Expiration, Facility, Time/Day, and Actions.

• Note: In OS/390 3.1.3 and above environments, the OPERCMDS resource class may be used instead.

Example: OPCMD resource class

This example assigns ownership of the DISPLAY console operator command to Department 01:

TSS ADDTO(DEPT01) OPCMD(DISPLAY)

This example removes ownership:

TSS REMOVE(DEPT01) OPCMD(DISPLAY)

This example permits a group of technical support users to use the SET OPCMD:

TSS PERMIT(TECHPRO) OPCMD(SET)

This example revokes access:

TSS REVOKE(TECHPRO) OPCMD(SET)