Add A GROUP And PROFILE On Same Top Secret Command?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

In this document:

https://comm.support.ca.com/kb/convert-z-os-2-3-member-izusec-from-racf-to-tss-commands/kb000095769

It's written:

**
TSS CRE(IZUADMIN) NAME('IZUADMIN PROFILE') TYPE(PROFILE) DEPT(dept) 

A type GROUP ACID cannot be added to a PROFILE acid in Top Secret. When adding IZUADMIN to an ACID, IZADMNGP also needs to be added. For example:

TSS ADD(acid) PROFILE(IZUADMIN) GROUP(IZADMNGP)
**

In the Top Secret documentation:

Note: The GROUP and PROFILE keywords cannot be used in the same TSS commands.

The keywords are interchangeable and coding GROUP() removes both GROUPS and PROFILE.
Based on this, the command is not correct: TSS ADD(acid) PROFILE(IZUADMIN) GROUP(IZADMNGP)

Cause

Confusion on command formats

Environment

z/os

Resolution

TSS ADD(acid) PROF(prof,group) will add to 'acid' 'prof' as a profile and 'group' as a group, with 'prof' being a true PROFILE type ACID and 'group' a true GROUP type ACID. It works in the same way with the TSS REMOVE command. In the case of IZUADMIN and IZADMNGP above, the command

TSS ADD(acid) PROFILE(IZUADMIN,IZADMNGP)

will add IZUADMIN as a profile and IZAMDNGP as a group.