Controlling Access › Resource Access Permission › Individual Permission Removal

Individual Permission Removal

To remove a specific permission:

• List the user’s or profiles’ XAUTH data
• Issue a revoke exactly as it is listed

Do not use the FOR keyword with the REVOKE command.

Examples: revoke permission

In this example, the output of the TSS LIST command is:

XA DATASET = SYS1.PROCLIB
   ACCESS  = READ
   PRIVPGM = IEBCOPY

To revoke the authorization, enter the command:

TSS REVOKE(user) DSNAME(SYS1.PROCLIB)
                 ACCESS(READ)
                 PRIVPGM(IEBCOPY)

Even if there were other permissions with different access levels or other criteria, only this permission would be revoked. If you code the REVOKE with only the resource and no other parameters all matches of the resource is revoked.