Defining and grouping operators

Your security plan can require that system programmers and operators at your installation be defined to RACF®. To improve accountability, you should create user profiles for any persons who:

Issue JES commands
Enter commands from an MCS-managed console
Update system data sets that JES uses

You can organize your installation's support personnel, particularly operators, into groups that are responsible for a particular area. For example, you might want to group your installation's support personnel by shift, functional area, or both.

To identify and group your installation's support personnel, you should:

List the user IDs of all of the system programmers and operators at your installation
Group any of the user IDs together if they:
- Perform similar tasks
- Work on the same shift
- Are responsible for the same area
If you decide to combine users into groups, you must:
- Record all of the user IDs in the group
- Describe why the users were grouped together
- Assign a unique name to the group

You should keep a record of user IDs and group name handy for use in securing other system resources such as spool data, console access, and commands as well as for updating groups in the future.