ACF2 privilege to add or delete users in SYS1.UADS

Products

• ACF2 - z/OS

Issue/Introduction

Which ACF2 privilege is needed to add or delete users in SYS1.UADS?  

Environment

Release : 16.0

Resolution

The ACCTPRIV attribute is needed to add or delete users in SYS1.UADS. The users with this privilege can be listed using following: 

ACF
SET LID
LIST IF(ACCTPRIV-)

 

Additional Information

List all users that are currently defined in SYS1.UADS: 

//LSTUADS EXEC  PGM=IKJEFT01,REGION=1024K                                                       
//SYSTSPRT DD DISP=(NEW,CATLG),DSN=sysuads.file,  
//  SPACE=(CYL,(5,5)),UNIT=SYSDA,                            
//  DCB=(RECFM=FBA,LRECL=133,BLKSIZE=1330)                  
//SYSUADS     DD      DSN=SYS1.UADS,DISP=SHR                
//SYSTSIN     DD      *                                      
ACCOUNT                                                      
LIST (*)                                                    
END                                                     

List a specific user:

ACCOUNT                                                        
LIST (logonid)                                                
END

Add a user to SYS1.UADS:

//CREAUAD EXEC  PGM=IKJEFT01,REGION=1024K                     

//SYSTSPRT    DD      SYSOUT=*                                

//SYSUADS     DD      DSN=SYS1.UADS,DISP=SHR                  

//SYSTSIN   DD      *                                         

ACCOUNT                                                       

DELETE (TSTUADS)                                              

ADD (TSTUADS TSTPASS 41000000D.MAC PROC3) ACCT OPER -       

SIZE(4096) UNIT(SYSALLDA) NOLIM -                             

DEST(LOCAL) MOUNT JCL RECOVER JOBCLASS(A) MSGCLASS(D) SYSOUT(7)

LIST (TSTUADS)                                                

END 

Use the following JCL to issue the ACCESS subcommand for SYS1.UADS:

//ACFBATCH EXEC PGM=ACFBATCH                                      
//SYSPRINT DD SYSOUT=*                                                                 
//SYSIN    DD *                                                  
ACCESS DSN('SYS1.UADS')                                          
/*

IBM documentation on listing what's in SYS1.UADS

 

IBM documentation on adding a user in SYS1.UADS