Start of change

KERBEROSUSER

The KERBEROSUSER system initialization parameter specifies the user ID associated with the Kerberos service principal for the CICS region.

KERBEROSUSER={region_userid | kerberos_userid}
You can specify any valid user ID to be associated with the Kerberos service principal for the CICS region. The CICS region user ID is used by default; however, this is not recommended.
Note: The user ID associated with the Kerberos service principal for the CICS region must not be a protected user ID. It is recommended that the CICS region user ID is protected to prevent revocation, and therefore should not be used for the Kerberos service principal.
End of change