You can change the system command groups that a console is authorized to enter.
The VARY CN,AUTH= command defines which system command groups may be entered through the consoles specified on the AUTH= keyword.
Example:
VARY CN(REMOTE),AUTH=MASTER
Enter this command through any console that has master authority. If you try to enter this command from a console without master authority, the command is rejected and a message appears to indicate that the switch did not take place.
In console services shared mode, the effect of this command lasts for the duration of the IPL; in distributed mode, the effect of the command lasts only for the duration of the console being active.