Adding Endevor Admins to Groups instead of having individual IDS

Products

• Endevor

Issue/Introduction

Under RACF the individual TSO USER IDs are  in two places to establish the Endevor ADMINS.  The auditors have asked to replace the 4 id's with one group id that all 4 id's are in. Currently the IDS are defined as ADMINIDS and AUTHUSR 

Is this possible?  is it advisable?   is it as simple as changing the table contents?   is the id limited to 7 characters?   the group id is 8.  The TSO id format is  TSUPS80  and the role based group is $G680403   

 

Environment

All

Resolution

There is no need to update and/or change the ESI BC1TNEQU table if the site is already setup to secure Endevor using RESOURCE instead of DATASETS.

Instead of adding the four userids individually to the RACF rules, the userids would be added to the RACF Group and the RACF Group would be added to the RACF rules that grant access to the Endevor Admin resources.