Defining the user ID for transactions that issue type-2 AO commands

Use the AOI= keyword on the TRANSACT macro to specify what RACF® and DFSCCMD0 use as a user ID for security checking.

You can use any of the following identifiers as a user ID:

• The user ID of the user signed on at the terminal issuing the transaction
• The transaction code
• The first three letters of the commands name

In certain circumstances, the user ID that is used to issue a transaction might not be available when security checking is performed. In these cases, IMS substitutes other identifiers as the user ID. For information on when IMS substitutes identifiers and what IMS uses as a substitute user ID, see User ID substitutions for AO application programs.

Unlike type-1 AO commands, you cannot disable the ability of a transaction to issue type-2 AO commands. AOI=NO applies only to type-1 AO commands and does not prevent transactions from issuing type-2 commands. For type-2 AO commands, AOI=NO is the same as AOI=YES.