Security › Internal Security › RMOAGRP Macro › Syntax

Syntax

name RMOAGRP	USER=(userid-list),	X
	ACCOUNT=x,		X
	OPER=x,		X
	BATCH=x,		X
	STC=x,		X
	LIMIT=x,		X
	EXCL=x

Where:

USER=(userid-list)

Specifies a list of generic user identifiers defining the list of users contained in the group.

If omitted, USER=* (all user identifiers) is assumed.

ACCOUNT=x[NO, YES]

Specifies whether the users specified must also be TSO users with account authority.

If omitted, ACCOUNT=NO is assumed.

Note: Some security systems are restricted to 7-character user IDs. Be sure that your user IDs (including the mask) conform to the restrictions of your security package.

OPER=x[NO, YES]

Specifies whether the users specified must also be TSO users with operator authority.

If omitted, OPER=NO is assumed.

BATCH=x[NO, YES]

Specifies whether a batch job for which no user identifier is supplied on the JOB JCL statement is a member of the group.

If omitted, BATCH=NO is assumed.

This operand is used as an alternative to the USER, ACCOUNT, and OPER operands.

For an online user or batch job/started task with a user identifier specified on its JOB JCL statement, the USER, ACCOUNT, and OPER operands are used exclusively to determine the group.

For a batch job with no user identifier specified on its JOB JCL statement, the BATCH operand is used exclusively to determine the group.

STC=x[NO, YES]

Specifies whether a started task for which no user identifier is supplied on the JOB JCL statement is a member of the group.

If omitted, STC=NO is assumed.

This operand is used as an alternative to the USER, ACCOUNT, and OPER operands.

For an online user or batch job/started task with a user identifier specified on its JOB JCL statement, the USER, ACCOUNT, and OPER operands are used exclusively to determine the group.

For a started task with no user identifier specified on its JOB JCL statement, the STC operand is used exclusively to determine the group.

LIMIT=x[NO, YES]

Specifies whether lists displayed contain only information the user is authorized to see (YES) or contain information the user is not authorized to see (NO).

This applies to selection lists and lists of items associated with the current subject.

For example, LIMIT=YES suppresses display of certain reports from the Reports For Job XYZ panel. Additional overhead is involved if LIMIT=YES is specified because each item in the list must be passed through the security process.

LIMIT=NO does not entail this individual item checking.

If omitted, LIMIT=NO is assumed.

Note: All continuation lines (USER, ACCOUNT, OPER, BATCH, STC, LIMIT) must begin in column 16; column 72 of the preceding record must contain a non-blank character.

EXCL=x[NO, YES]

Indicates to exclude this entry from "online" candidacy.