Kernel services support two levels of appropriate privileges: UNIX level and z/OS UNIX level. This lets you distinguish superusers from daemons. You need to determine which level of security is appropriate for your installation.