The following Racf commands for IBM Z Virtual Test Platform Server Extension need to be translated into Top Secret.
ADDGROUP BZOGROUP OMVS(AUTOGID) +
DATA('GROUP WITH OMVS SEGMENT FOR STARTED TASKS')
ADDUSER BZO DFLTGRP(BZOGROUP) NOPASSWORD +
OMVS(AUTOUID HOME(/u/bzo) PROGRAM(/bin/sh) +
NAME('Server Extension') +
DATA('IBM Z Virtual Test Platform Server Extension')
RDEFINE STARTED BZOSRVR.* +
STDATA(USER(BZO) GROUP(BZOGROUP) TRUSTED(NO)) +
DATA('IBM Z Virtual Test Platform Server Extension')
SETROPTS RACLIST(STARTED) REFRESH
Release : 16.0
It is assumed that a group called BZOGROUP does not exist. Also be aware that these RACF commands are using auto-assign to give the group a GID and the user BZO a UID. If IBM wanted a superuser it would show the values and not use auto-assign, so values need to be given for each.
TSS CREATE(BZOGROUP) NAME('GROUP WITH OMVS SEGMENT FOR STARTED TASKS') DEPT(dept) TYPE(GROUP)
TSS ADD(BZOGROUP) GID(xx)
TSS CREATE(BZO) NAME('IBM Z Virtual Test Platform Server Extension') TYPE(USER) PROTECTED
TSS ADD(BZO) UID(xx) HOME('/u/bzo') OMVSPGM('/bin/sh')
TSS ADD(BZO) GROUP(BZOGROUP) DFLTGRP(BZOGROUP)
TSS ADD(STC) PROCN(BZOSRVR) ACID(BZO)