A logonid has been assigned to use multiple OMVS groups(supplemental groups) using the TYPE(TGR) rules. Is there some way to list all the supplemental groups the a user/logonid has access to use?
Release : 16.0
Component : CA ACF2 for z/OS
To list all the groups the a user/logonid has access to, use the OMVS ID command. The user can go into OMVS and issue the 'id' command from the command line and the logonids UID, GID and GROUPS(supplemental) will be returned.
For example:
IBM is a registered trademark of the IBM Corp.
$ id
uid=1(ACBBACK) gid=10(THORGRP) groups=0(DADDDGRP),1(ENF),3(ACFSTC),4(TTY),8(REBUILD),15(CIAGRP),22(DFTGRP)
or
If you have authority you can issue the id command for another logonid, for example:
IBM is a registered trademark of the IBM Corp.
$ id USER001
uid=1(ACBBACK) id=0(DADDDGRP) groups=0(DADDDGRP),4(TTY),8(REBUILD),15(CIAGRP),27(PAYGRP)
Details on the OMVS id command can be found the IBM z/OS UNIX System Services Command Reference documentation section 'id — Return the user identity'.