Identifying users

RACF® controls the interaction between users and resources. You define resources and the level of access allowed by users to these resources in RACF profiles. A user is an alphanumeric user ID that RACF associates with the user.

Tivoli Workload Scheduler for z/OS needs access to non-IBM Tivoli Workload Scheduler for z/OS resources for the work it schedules. The user ID associated with IBM Tivoli Workload Scheduler for z/OS can be obtained from:

• The Tivoli Workload Scheduler for z/OS address space that accesses data sets used by the work it schedules, and that submits work and issues JES and MVS™ commands.
• The user= parameter on the JOB card of a batch job.
• The Tivoli Workload Scheduler for z/OS job-submit exit, EQQUX001, which is called when Tivoli Workload Scheduler for z/OS is about to submit a job or start a started task, and which can pass back a user ID.
• The USRREC statement, which specifies the name and password of the user on a supported Windows workstation.
• The LOCALPSW statement, which specifies whether the name and password of a user on a Windows workstation is defined either on z/OS® using the USRREC statement (LOCALPSW set to NO) or on the Windows workstation using a local file (LOCALPSW set to YES). If you set LOCALPSW to YES, the scheduler looks for the USRREC statement first, then for the local file.
• The USERMAP keyword of the SERVOPTS statement.

User IDs that access Tivoli Workload Scheduler for z/OS resources can be:

• A TSO user ID that accesses the Tivoli Workload Scheduler for z/OS dialogs, submits batch jobs that access Tivoli Workload Scheduler for z/OS resources, and issues Tivoli Workload Scheduler for z/OS TSO commands.
• An Tivoli Workload Scheduler for z/OS address space, which must be permitted access to Tivoli Workload Scheduler for z/OS resources.
• Other started-task address spaces that pass requests to an Tivoli Workload Scheduler for z/OS address space.
• A user ID supplied by a transaction program (TP) that uses the Tivoli Workload Scheduler for z/OS API to communicate with the controller.
• A user ID defined by the USERMAP keyword of the SERVOPTS statement to work with Dynamic Workload Console.