This topic summarizes the TSO commands that relate to RACF®. For complete information on logging on to TSO and on TSO commands, see z/OS TSO/E User's Guide and z/OS TSO/E System Programming Command Reference.

• Fields on the TSO/E logon panel
  • PASSWORD and NEW PASSWORD fields: Users should keep their passwords in confidence. Users should also know how to change passwords when logging on, and should know how to specify new passwords that comply with the syntax rules.

    Users should be aware that the RACF might prevent them from changing their passwords too frequently if the SETROPTS PASSWORD(MINCHANGE) interval is set. Also, if mixed-case passwords are allowed, users must supply each character of their passwords in the same case as was used when the passwords were set.

  • GROUP IDENT field: Specify this field only if list-of-groups processing is not in effect and if the user wants the job to run with a group other than the user's default group.
  • SECLABEL field: Specify this field to log on with a security label other than the user's current security label.
  • Users with the OIDCARD attribute must supply a valid operator identification card during logon.
• Operands on the TSO LOGON command:
  • NEWPASSWORD (to specify a new password to replace the current password)
  • GROUP (to specify the group name to which the user is connected during the terminal session).
• Settings on the TSO PROFILE command:
  • PREFIX (used in determining the RRSFLIST data set name)
  • INTERCOM (determines whether RRSF uses SEND to send messages to the command issuer for directed commands).
• Sending and receiving messages: Depending on how security labels are used on your system, and on how SETROPTS options are set, users might need to be aware of their current security label when they send or receive messages from other users. For more information, see Controlling the use of the TSO SEND command.
• Submitting and cancelling jobs: Users have flexibility with regard to which jobs they can work with using the TSO SUBMIT and CANCEL commands. For more information, see Surrogate job submission and Controlling who can cancel jobs by job name.