Usage notes

  1. Either USER or GROUP must be specified, but not both. USER and GROUP are mutually exclusive.
  2. One of the following operands must be specified: ACCess, CONSOLE, SPOOL, or IPCS.
  3. For an explanation of wildcard pattern matching, see Wildcard pattern matching.
  4. When a user or group is authorized for access level CONTROL, they are also authorized for access level CONFIG when one of the following is also true:
    1. ESM is set to N on the DEFOPTN command, or
    2. ESM is set to Y and AUTHCMD is set to N on the DEFOPTN command.
  5. A user authorized for CONTROL is not authorized for CONFIG if ESM is set to Y and AUTHCMD is set to Y on the DEFOPTN command.