ACF2, How to list the supplemental groups for a logonid that sign into OMVS ?

Products

• ACF2
• ACF2 - z/OS
• ACF2 - MISC
• Top Secret

Issue/Introduction

A logonid has been assigned to use multiple OMVS groups(supplemental groups) using the TYPE(TGR) rules. Is there some way to list all the supplemental groups the a user/logonid has access to use?

 

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

To list all the groups the a user/logonid has access to, use the OMVS ID command. The user can go into OMVS and issue the 'id' command from the command line and the logonids UID, GID and GROUPS(supplemental) will be returned.

For example:

IBM is a registered trademark of the IBM Corp.                                  
                                                                                
$ id                                                                            
uid=1(ACBBACK) gid=10(THORGRP) groups=0(DADDDGRP),1(ENF),3(ACFSTC),4(TTY),8(REBUILD),15(CIAGRP),22(DFTGRP)

or

If you have authority you can issue the id command for another logonid, for example:

IBM is a registered trademark of the IBM Corp.                                  
                                                                                
$ id USER001                                                                            
uid=1(ACBBACK) id=0(DADDDGRP) groups=0(DADDDGRP),4(TTY),8(REBUILD),15(CIAGRP),27(PAYGRP)

Details on the OMVS id command can be found the IBM z/OS UNIX System Services Command Reference documentation section 'id — Return the user identity'.