Resources › OPERCMDS Resource Class—Secure JES Operator Commands

OPERCMDS Resource Class—Secure JES Operator Commands

Valid on z/OS.

Use OPERCMDS to secure JES, z/OS operator commands.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) OPERCMDS(oper,oper...)

Prefix length

Two to twenty‑six characters

Capacity of list

One to eight prefixes per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) OPERCMDS(prefix(es))

Prefix length

Two to forty‑four characters.

Capacity of list

One to eight prefixes per TSS command.

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOHAS, and WHOOWNS
• The OPERCMDS ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The OPERCMDS ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• OPERCMDS(OWN) authority to ADD or REMOVE ownership of OPERCMDS from ACIDs
• OPERCMDS(XAUTH) authority to permit or revoke access OPERCMDS

The administrator can:

• Specify the access levels: ALL, NONE, READ, UPDATE, and CONTROL. If ACCESS is not specified, CA Top Secret defaults to READ access.
• Use any of the following methods to control access to OPERCMDS: Expiration, Facility, Time/Day, and Actions.
• Note: Only z/OS, ESA release 3.1.3 and above offer support for all resources.

Masking

The OPERCMDS resource class supports all masking characters.

Examples: OPERCMDS resource class

This example assigns ownership to USER01, so that ACID can cancel a TSO session:

TSS ADDTO(USER01) OPERCMDS(ABC.ABC.ABC)

This example removes ownership:

TSS REMOVE(USER01) OPERCMDS(ABC.ABC.ABC)

This example allows any user to cancel their own TSO session (assuming that the user has access to a subsystem console):

TSS PERMIT(ALL) OPERCMDS(ABC.ABC.ABC.%) ACCESS(UPDATE)

This example revokes access:

TSS REVOKE(ALL) OPERCMDS(ABC.ABC.ABC.%)