z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


The OPERPARM segment in user profiles

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

Users can enter an extended MCS console session as follows:
  • If the application they use executes the MCSOPER macro (an authorized macro)
  • If the user issues the TSO CONSOLE command

For information on using RACF® to control the users who can establish an extended MCS console session, see z/OS MVS Planning: Operations.

Users who enter an extended MCS console session can act as system operators. An installation can set the default characteristics (including command authorities) for these sessions by defining OPERPARM segments in the user profiles of these users. To do this, issue the ADDUSER or ALTUSER command with the OPERPARM operand. You can specify the following information:
ALTGRP
Alternative console group for recovery. Ignored when each system sharing the RACF database runs z/OS Version 1 Release 8 or higher.
AUTH
Operator's command authority
CMDSYS
Name of the system to which the operator is connected for command processing
DOM
Indicates whether the operator should receive delete operator message requests
HC
Specifies whether this console is to receive all messages that are directed to hardcopy. Note that route codes specified for a console do not apply to hardcopy messages, so this console will receive all hardcopy messages regardless of route code.
INTIDS
Indicates whether or not a console should receive messages directed to console ID zero (the internal console)
KEY
Indicates a data retrieval key used to search for operator consoles using the DISPLAY CONSOLES command
LEVEL
Message level that the operator receives
LOGCMDRESP
Indicates whether command responses received by the operator are to be recorded on the hardcopy log
MFORM
Format in which messages are displayed
MIGID
Indicates whether the operator is to receive a migration console ID. Ignored when each system sharing the RACF database runs z/OS Version 1 Release 8 or higher.
MONITOR
Events that the operator can monitor
MSCOPE
Name of the system from which the operator receives unsolicited messages
ROUTCODE
Routing codes that the operator receives
STORAGE
Maximum amount of virtual storage in megabytes for message queuing
UD
Indicates whether the operator should receive messages that are considered undeliverable. Ignored when each system sharing the RACF database runs z/OS Version 1 Release 8 or higher.
UNKNIDS
Indicates whether a console is to receive messages directed to unknown console IDs

To define or change information in the OPERPARM segment of a user profile, including your own, you must have the SPECIAL attribute or at least UPDATE authority to the segment through field-level access checking. To display information in the OPERPARM segment of a user profile, you must have the SPECIAL attribute or at least READ authority to the segment through field-level access checking. For more information, see Field-level access checking.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014