Resources › TSOAUTH Resource Class—Secure TSO User Attributes

TSOAUTH Resource Class—Secure TSO User Attributes

Valid on z/OS.

Use TSOAUTH to secure TSO user attributes.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid)TSOAUTH(authority...)

Prefix length

One to eight characters

Capacity of list

Five authorities per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid)TSOAUTH(prefix(es))

Prefix length

One to eight characters

Capacity of list

Five authorities per TSS command

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOHAS, and WHOOWNS
• The TSOAUTH ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• TSOAUTH ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• TSOAUTH(OWN) authority to protect user access to specific attributes.
• TSOAUTH(XAUTH) authority to permit or revoke access to accounting codes

The administrator can use any of the following methods to control access to TSO authorities: Expiration, Facility, Time/Day, and Actions.

Examples: TSOAUTH resource class

This example protects the user of TSO MOUNT authority:

TSS ADDTO(SYSDEPT)TSOAUTH(MOUNT)

This example removes ownership:

TSS REMOVE(SYSDEPT)TSOAUTH(MOUNT)

This example allows an ACID to use the OPER command:

TSS PERMIT(USERA)TSOAUTH(OPER)

This example revokes access:

TSS REVOKE(USERA)TSOAUTH(OPER)