User ID considerations

The user ID of an RSE API user must have at least the following attributes:

  • TSO access (with a normal region size).
  • An OMVS segment defined to the security system (for example, RACF®), both for the user ID and its default group.
    • The HOME field must refer to a home directory allocated for the user (with READ, WRITE and EXECUTE access).
    • The PROGRAM field in the OMVS segment should be /bin/sh or other valid z/OS® UNIX shell, such as /bin/tcsh.
    • The ASSIZEMAX field should not be set, so that system defaults are used.
    • The user ID does not require UID 0.
      Example (command LISTUSER userid NORACF OMVS):
      USER=userid
      
      OMVS INFORMATION
      ----------------
      UID= 0000003200
      HOME= /u/userid
      PROGRAM= /bin/sh
      CPUTIMEMAX= NONE
      ASSIZEMAX= NONE
      FILEPROCMAX= NONE
      PROCUSERMAX= NONE
      THREADSMAX= NONE
      MMAPAREAMAX= NONE
    • The user ID’s default group requires a GID.
      Example (command LISTGRP group NORACF OMVS):
      GROUP group
      
      OMVS INFORMATION
      ----------------
      GID= 0000003243
  • READ and EXECUTE access to the RSE API installation and configuration directories and files, default /usr/lpp/IBM/rseapi/*, /etc/zexpl/*, and /var/zexpl/*.
  • READ, WRITE, and EXECUTE access to the RSE API WORK directory, default /var/zexpl/rseapi/rseapi_WORK, and user log directory, default /var/zexpl/logs.
  • READ access to the RSE API installation data sets, default HUH.SHUH*.
  • READ, WRITE, and EXECUTE access to the /tmp directory or a directory referenced in the TMPDIR environment variable.