zOSMF setup for TSO ACCOUNT Code in ACF2

Products

• ACF2 - z/OS

Issue/Introduction

There is setup within zOSMF that requires values to be selected. One is the account number to be used for TSO sessions that are spun off within zOSMF.

A valid account number has to be used. The doc states there is a default value (IZUACCT).  Is the default value pre-populated with a PTF or other mechanism into ACF2?

Environment

Release : 16.0

Resolution

TSO account validation occurs against resource class ACCTNUM.

The account code that is specified must be allowed by a resource rule:
CLASS=ACCTNUM
$KEY(xxxxx) TYPE(saf)
UID(*) ALLOW

The default ACCTNUM type is SAF, but a clasmap can be defined to change it to a different value.
A rule is needed even if this is a default TSOACCT of a logonid. 

There is similar validation for TSOPROC resource class. The default type is also SAF.