Is it possible to see the USERID information when commands from a console are issued, instead of the normal OPERATOR?
When we issue any command, it will always show OPERATOR, but it would be good to see the actual RACF USERID instead, if possible
What settings/ RACF changes should be performed if this is possible?
OPERATOR 14:08:47 REINIT
OPERATOR 14:08:47 =ESF881 REINIT SUCCESSFULLY COMPLETED
OPERATOR 14:07:47 DS
OPERATOR 14:45:02 HX
OPERATOR 14:45:02 =ESF835 FILE TRANSFER INTERFACE HALTED
OPERATOR 14:45:10 SX
OPERATOR 14:45:10 =ESF838 FILE TRANSFER INTERFACE STARTED
Release : 14.0
Component : Spool
The UserID is not passed to Spool when it receives a command from an MVS console or from the SDSF or SYSVIEW console interfaces.
Spool supplies the OPERATOR identifier, and there is no way to stop it or secure it from the Spool side.
If the end-user is able to access an MVS console or is authorized to enter commands via SDSF or SYSVIEW (or any other console interface), Spool allows it and tags it with OPERATOR.
If someone is logged in to Spool and issues a command, the UserID will appear in the corresponding message.