The following tables define field names and their usage. All field
names relate directly to the ADDUSER and ALTUSER keywords. Although
the fields are alphabetized in the following tables, there is no defined
order in which the fields are returned when using the extract functions.
See z/OS Security Server RACF Command Language Reference
for questions pertaining to field usage and data. Note that within
the command image generated internally, RACF® truncates
long keywords to 12 characters.
Boolean and list fields are identified in the field name column.
Unless otherwise noted, a field is a character field by default.
For list fields, the list header field returned by the extract function
is also specified. Unless otherwise noted, all list fields are 1-dimensional
arrays.
Table 1. BASE segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword Reference,
or LISTUSER heading (for output-only fields) |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| ADSP (boolean) |
'Y' |
ADSP |
Yes |
Yes |
Yes |
| 'N' |
NOADSP |
Yes |
Yes |
Yes |
| AUDITOR (boolean) |
'Y' |
AUDITOR |
Yes |
Yes |
Yes |
| 'N' |
NOAUDITOR |
Yes |
Yes |
Yes |
| AUTH |
'Y' |
AUTHORITY (xx) |
Yes |
Yes |
No |
| CATEGORY (list NUMCTGY) |
'Y' |
ADDCATEGORY(xx ...) |
Yes |
No |
Yes |
| 'A' |
ADDCATEGORY(xx ...) |
No |
Yes |
Yes |
| 'D' |
DELCATEGORY(xx ...) |
No |
Yes |
Yes |
NOTES: - To remove unknown categories from the profile, specify the 'D'
flag and a field length of zero.
- On output, if a category cannot be mapped back to its external
name, the string "-UNKNOWN-" is returned for the category value.
|
| CLAUTH (list CLCNT) |
'Y' |
CLAUTH(xx...) |
Yes |
No |
Yes |
| 'A' |
CLAUTH(xx ...) |
No |
Yes |
Yes |
| 'D' |
NOCLAUTH(xx ...) |
No |
Yes |
Yes |
| 'N' |
NOCLAUTH |
Yes |
No |
Yes |
| CONNECTS |
N/A |
Note:
This is the list header field
for the 15-dimensional array consisting of the following fields |
No |
No |
Yes |
| CADSP
(boolean)
|
N/A |
N/A. These fields correspond to CONNECTS
command keywords |
No |
No |
Yes |
| CAUDITOR |
N/A |
N/A |
No |
No |
Yes |
| CAUTHDA |
N/A |
N/A |
No |
No |
Yes |
| CGROUP
|
N/A |
N/A |
No |
No |
Yes |
| CGRPACC |
N/A |
N/A |
No |
No |
Yes |
| CINITCT |
N/A |
N/A |
No |
No |
Yes |
| CLJDATE |
N/A |
N/A |
No |
No |
Yes |
| CLJTIME |
N/A |
N/A |
No |
No |
Yes |
| COPER |
N/A |
N/A |
No |
No |
Yes |
| COWNER |
N/A |
N/A |
No |
No |
Yes |
| CRESUME |
N/A |
N/A |
No |
No |
Yes |
| CREVOKE
(This is the
revoke date.
See CREVOKFL
field for boolean
output.)
|
N/A |
N/A |
No |
No |
Yes |
| CREVOKFL
(boolean)
|
N/A |
N/A |
No |
No |
Yes |
| CSPECIAL
(boolean)
|
N/A |
N/A |
No |
No |
Yes |
| CUACC |
N/A |
N/A |
No |
No |
Yes |
| CREATDAT |
N/A |
CREATED= |
No |
No |
Yes |
| DATA |
'Y' |
DATA (xx) |
Yes |
Yes |
Yes |
| 'N' |
NODATA |
No |
Yes |
Yes |
| DFLTGRP |
'Y' |
DFLTGRP (xx) |
Yes |
Yes |
Yes |
| EXPIRED (boolean) |
'Y' |
EXPIRED |
No |
Yes |
No |
| 'N' |
NOEXPIRED |
No |
Yes |
No |
| GROUP |
'Y' |
GROUP (xx) |
No |
Yes |
No |
| GRPACC (boolean) |
'Y' |
GRPACC |
Yes |
Yes |
Yes |
| 'N' |
NOGRPACC |
Yes |
Yes |
Yes |
| HASPHRAS (boolean) |
N/A |
ATTRIBUTES= |
No |
No |
Yes |
| HASPWD (boolean) |
N/A |
ATTRIBUTES= |
No |
No |
Yes |
| LASTDATE |
N/A |
LAST-ACCESS= (left side of "/") |
No |
No |
Yes |
| LASTTIME |
N/A |
LAST-ACCESS= (right side of "/") |
No |
No |
Yes |
| MODEL |
'Y' |
MODEL (xx) |
Yes |
Yes |
Yes |
| 'N' |
NOMODEL |
No |
Yes |
Yes |
| NAME |
'Y' |
NAME (xx) |
Yes |
Yes |
Yes |
| 'N' |
NAME |
No |
Yes |
Yes |
| OIDCARD (boolean) |
'Y' |
OIDCARD |
No |
No |
No |
| 'N' |
NOOIDCARD |
Yes |
Yes |
No |
| OPER (boolean) |
'Y' |
OPERATIONS |
Yes |
Yes |
Yes |
| 'N' |
NOOPERATIONS |
Yes |
Yes |
Yes |
| OWNER |
'Y' |
OWNER(xx) |
Yes |
Yes |
Yes |
| PASSDATE |
N/A |
PASSDATE= |
No |
No |
Yes |
| PASSINT |
N/A |
PASS-INTERVAL= |
No |
No |
Yes |
| PASSWORD |
'Y' |
PASSWORD (xx) |
Yes |
Yes |
No |
| 'N' |
NOPASSWORD |
Yes |
Yes |
No |
| PHRASE |
'Y' |
PHRASE (xx) |
Yes |
Yes |
No |
| 'N' |
NOPHRASE |
No |
Yes |
No |
| PHRDATE |
N/A |
PHRASEDATE= |
No |
No |
Yes |
| PPHENV (boolean) |
N/A |
PHRASE ENVELOPED= |
No |
No |
Yes |
| PROTECTD (boolean) |
N/A |
ATTRIBUTES= |
No |
No |
Yes |
| PWDENV (boolean) |
N/A |
PASSWORD ENVELOPED= |
No |
No |
Yes |
| REST (boolean) |
'Y' |
RESTRICTED |
Yes |
Yes |
Yes |
| 'N' |
NORESTRICTED |
Yes |
Yes |
Yes |
| RESUME (on output, this
is the resume date) |
'Y' |
RESUME(xx) |
No |
Yes |
Yes |
| 'N' |
NORESUME |
No |
Yes |
Yes |
| REVOKE (on output, this
is the revoke date. See REVOKEFL for boolean 'revoked' bit) |
'Y' |
REVOKE(xx) |
No |
Yes |
Yes |
| 'N' |
NOREVOKE |
No |
Yes |
Yes |
| REVOKEFL (boolean) |
N/A |
ATTRIBUTES= |
No |
No |
Yes |
| NOTE: The value of
the REVOKEFL field is consistent with the behavior of the LISTUSER
command in that it takes revoke and resume dates into account when determining if
the user is revoked. |
| SECLABEL |
'Y' |
SECLABEL (xx) |
Yes |
Yes |
Yes |
| 'N' |
NOSECLABEL |
No |
Yes |
Yes |
| SECLEVEL |
'Y' |
SECLEVEL (xx) |
Yes |
Yes |
Yes |
| 'N' |
NOSECLEVEL |
No |
Yes |
Yes |
| SPECIAL (boolean) |
'Y' |
SPECIAL |
Yes |
Yes |
Yes |
| 'N' |
NOSPECIAL |
Yes |
Yes |
Yes |
| UACC |
'Y' |
UACC (xx) |
Yes |
Yes |
No |
| UAUDIT (boolean) |
'Y' |
UAUDIT |
No |
Yes |
Yes |
| 'N' |
NOUAUDIT |
No |
Yes |
Yes |
| WHENDAYS (list WHENDYCT) |
'Y' |
WHEN(DAYS (xx)) |
Yes |
Yes |
Yes |
| WHENTIME |
'Y' |
WHEN(TIME (xx)) |
Yes |
Yes |
Yes |
Table 2. CICS® segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword
reference |
Allowed on add
requests |
Allowed on alter
requests |
Returned on extract requests |
|---|
| OPCLASS (list OPCLASSN) |
'Y' |
CICS( OPCLASS (xx ...)) |
Yes |
Yes |
Yes |
| 'A' |
CICS( ADDOPCLASS (xx ... )) |
No |
Yes |
Yes |
| 'D' |
CICS(DELOPCLASS (xx ...)) |
No |
Yes |
Yes |
| 'N' |
CICS(NOOPCLASS ) |
No |
Yes |
Yes |
| OPIDENT |
'Y' |
CICS(OPIDENT (xx)) |
Yes |
Yes |
Yes |
| 'N' |
CICS(NOOPIDENT) |
No |
Yes |
Yes |
| OPPRTY |
'Y' |
CICS(OOPPRTY (xx)) |
Yes |
Yes |
Yes |
| 'N' |
CICS( NOOPPRTY) |
No |
Yes |
Yes |
| RSLKEY (list RSLKEYN) |
'Y' |
CICS(RSLKEY(xx...)) |
Yes |
Yes |
Yes |
| 'N' |
CICS(NORSLKEY) |
No |
Yes |
Yes |
| TIMEOUT |
'Y' |
CICS( TIMEOUT (xx)) |
Yes |
Yes |
Yes |
| 'N' |
CICS( NOTIMEOUT) |
No |
Yes |
Yes |
| TSLKEY (list TSLKEYN) |
'Y' |
CICS(TSLKEY(xx...)) |
Yes |
Yes |
Yes |
| 'N' |
CICS(NOTSLKEY) |
No |
Yes |
Yes |
| XRFSOFF |
'Y' |
CICS( XRFSOFF (xx)) |
Yes |
Yes |
Yes |
| 'N' |
CICS( NOXRFSOFF) |
No |
Yes |
Yes |
Table 3. CSDATA segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| custom-keyword |
'Y' |
CSDATA (custom-keyword(xxx)) |
Yes |
Yes |
Yes |
| 'N' |
CSDATA (NOcustom-keyword) |
No |
Yes |
| A custom field (keyword and value
type) is installation specific. On extract requests the field descriptor mapping will contain
the custom-keyword and the associated data value. |
Table 4. DCE segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| AUTOLOG (boolean) |
'Y' |
DCE(AUTOLOGIN (YES)) |
Yes |
Yes |
Yes |
| 'N' |
DCE(AUTOLOGIN(NO)) |
Yes |
Yes |
| DCENAME |
'Y' |
DCE(DCENAME(xx)) |
Yes |
Yes |
Yes |
| 'N' |
DCE(DCENAME ) |
No |
Yes |
| HOMECELL |
'Y' |
DCE(HOMECELL (xx)) |
Yes |
Yes |
Yes |
| 'N' |
DCE(NOHOMECELL) |
No |
Yes |
| HOMEUUID |
'Y' |
DCE(HOMEUUID (xx)) |
Yes |
Yes |
Yes |
| 'N' |
DCE(NOHOMEUUID) |
No |
Yes |
| UUID |
'Y' |
DCE(UUID(xx)) |
Yes |
Yes |
Yes |
| 'N' |
DCE(NOUUID) |
No |
Yes |
Table 5. DFP segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| DATAAPPL |
'Y' |
DFP(DATAAPPL(xx)) |
Yes |
Yes |
Yes |
| 'N' |
DFP(NODATAAPPL) |
No |
Yes |
| DATACLAS |
'Y' |
DFP(DATACLAS(xx)) |
Yes |
Yes |
Yes |
| 'N' |
DFP(NODATACLAS) |
No |
Yes |
| MGMTCLAS |
'Y' |
DFP(MGMTCLAS(xx)) |
Yes |
Yes |
Yes |
| 'N' |
DFP(NOMGMTCLAS) |
No |
Yes |
| STORCLAS |
'Y' |
DFP(STORCLAS(XX)) |
Yes |
Yes |
Yes |
| 'N' |
DFP(NOSTORCLAS) |
No |
Yes |
Table 6. EIM segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER
keyword reference |
Allowed on add
requests |
Allowed on alter
requests |
Returned on extract requests |
|---|
| LDAPPROF |
'Y' |
EIM(LDAPPROF(xx)) |
Yes |
Yes |
Yes |
| 'N' |
EIM(NOLDAPPROF) |
No |
Yes |
Table 7. KERB segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference,
or LISTUSER heading (for output-only fields) |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| ENCRYPT (list ENCRYPTN) |
'Y' |
KERB(ENCRYPT(xx)) |
Yes |
Yes |
Yes |
| 'N' |
KERB(NOENCRYPT) |
No |
Yes |
| KERBNAME |
'Y' |
KERB(KERBNAME(xx)) |
Yes |
Yes |
Yes |
| 'N' |
KERB(NOKERBNAME) |
No |
Yes |
| KEYFROM |
N/A |
KEY FROM= |
No |
No |
Yes |
| KEYVERS |
N/A |
KEY VERSION= |
No |
No |
Yes |
| MAXTKTLF |
'Y' |
KERB(MAXTKTLFE(xx)) |
Yes |
Yes |
Yes |
| 'N' |
KERB(NOMAXTKTLFE) |
No |
Yes |
Table 8. Language segment
fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| PRIMARY |
'Y' |
LANGUAGE (PRIMARY(xx)) |
Yes |
Yes |
Yes |
| 'N' |
LANGUAGE(NOPRIMARY) |
No |
Yes |
| SECOND |
'Y' |
LANGUAGE(SECONDARY(xx)) |
Yes |
Yes |
Yes |
| 'N' |
LANGUAGE(NOSECONDARY) |
No |
Yes |
Table 9. LNOTES segment
fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| SNAME |
'Y' |
LNOTES(SNAME (xx)) |
Yes |
Yes |
Yes |
| 'N' |
LNOTES(NOSNAME) |
No |
Yes |
Table 10. NDS segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| UNAME |
'Y' |
NDS(UNAME (xx)) |
Yes |
Yes |
Yes |
| 'N' |
NDS(NOUNAME) |
No |
Yes |
Table 11. NetView segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| CONSNAME |
'Y' |
NETVIEW(CONSNAME (xx)) |
Yes |
Yes |
Yes |
| 'N' |
NETVIEW(NOCONSNAME) |
No |
Yes |
| CTL |
'Y' |
NETVIEW(CTL (xx)) |
Yes |
Yes |
Yes |
| 'N' |
NETVIEW(NOCTL) |
No |
Yes |
| DOMAINS (list DOMAINSN) |
'Y' |
NETVIEW(DOMAINS (xx ...)) |
Yes |
Yes |
Yes |
| 'A' |
NETVIEW(ADDDOMAINS (xx ...)) |
No |
Yes |
| 'D' |
NETVIEW(ADDDOMAINS (xx ...)) |
No |
Yes |
| 'N' |
NETVIEW(ADDDOMAINS (xx ...)) |
No |
Yes |
| IC |
'Y' |
NETVIEW(IC (xx )) |
Yes |
Yes |
Yes |
| 'N' |
NETVIEW(NOIC) |
No |
Yes |
| MSGRECVR (boolean) |
'Y' |
NETVIEW(MSGRECVR (YES)) |
Yes |
Yes |
Yes |
| 'N' |
NETVIEW(MSGRECVR (NO)) |
Yes |
Yes |
| NGMFADMN (boolean) |
'Y' |
NETVIEW(NGMFADMN(YES)) |
Yes |
Yes |
Yes |
| 'N' |
NETVIEW(NGMFADMN (NO)) |
No |
Yes |
| NGMFVSPN |
'Y' |
NETVIEW(NGMFVSPN (xx)) |
Yes |
Yes |
Yes |
| 'N' |
NETVIEW( NONGMFVSPN) |
No |
Yes |
| OPCLASS (list OPCLASSN) |
'Y' |
NETVIEW(OPCLASS (xx ...)) |
Yes |
Yes |
Yes |
| 'A' |
NETVIEW( ADDOPCLASS (xx ...)) |
No |
Yes |
| 'D' |
NETVIEW( DELOPCLASS (xx ...)) |
No |
Yes |
| 'N' |
NETVIEW( NOOPCLASS) |
No |
Yes |
Table 12. OMVS segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| ASSIZE |
'Y' |
OMVS(ASSIZEMAX (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOASSIZEMAX) |
No |
Yes |
| AUTOUID |
'Y' |
OMVS(AUTOUID) |
Yes |
Yes |
No |
| CPUTIME |
'Y' |
OMVS(CPUTIMEMAX (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOCPUTIMEMAX) |
No |
Yes |
| FILEPROC |
'Y' |
OMVS(FILEPROCMAX (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOFILEPROCMAX) |
No |
Yes |
| HOME |
'Y' |
OMVS(HOME (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOHOME ) |
No |
Yes |
| MEMLIMIT |
'Y' |
OMVS(MEMLIMIT(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOMEMLIMIT)) |
No |
Yes |
| MMAPAREA |
'Y' |
OMVS(MMAPAREAMAX (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOMMAPAREAMAX) |
No |
Yes |
| PROCUSER |
'Y' |
OMVS(PROCUSERMAX (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOPROCUSERMAX) |
No |
Yes |
| PROGRAM |
'Y' |
OMVS(PROGRAM (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOPROGRAM) |
No |
Yes |
| SHARED |
'Y' |
OMVS(SHARED) |
Yes |
Yes |
No |
| SHMEMMAX |
'Y' |
OMVS(SHMEMMAX(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOSHMEMMAX)) |
No |
Yes |
| THREADS |
'Y' |
OMVS(THREADSMAX (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOTHREADSMAX) |
No |
Yes |
| UID |
'Y' |
OMVS(UID (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OMVS(NOUID) |
No |
Yes |
Table 13. OPERPARM segment
fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| ALTGRP |
'Y' |
OPERPARM (ALTGRP(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOALTGRP) |
No |
Yes |
| AUTO |
'Y' |
OPERPARM(AUTO(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOAUTO)) |
No |
Yes |
| CMDSYS |
'Y' |
OPERPARM(CMDSYS (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM (NOCMDSYS) |
No |
Yes |
| DOM |
'Y' |
OPERPARM(DOM xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM (NODOM) |
No |
Yes |
| HC |
'Y' |
OPERPARM(HC(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOHC) |
No |
Yes |
| INTIDS |
'Y' |
OPERPARM(INTIDS(xx)) |
Yes |
No |
Yes |
| 'N' |
OPERPARM(NOINTIDS) |
No |
Yes |
| KEY |
'Y' |
OPERPARM(KEY(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOKEY) |
No |
Yes |
| LEVEL (list LEVELN) |
'Y' |
OPERPARM(LEVEL (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOLEVEL) |
No |
Yes |
| LOGCMD |
'Y' |
OPERPARM(LOGCMDRESP(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOLOGCMDRESP) |
No |
Yes |
| MFORM (list MFORMN) |
'Y' |
OPERPARM(MFORM(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOMFORM) |
No |
Yes |
| MIGID |
'Y' |
OPERPARM(MIGID(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOMIGID) |
No |
Yes |
| MONITOR (list MONITORN) |
'Y' |
OPERPARM(MONITOR(xx...)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOMONITOR) |
No |
Yes |
| MSCOPE (list MSCOPEN) |
'Y' |
OPERPARM(MSCOPE(xx ...)) |
Yes |
Yes |
Yes |
| 'A' |
OPERPARM(ADDMSCOPE(xx ...)) |
No |
Yes |
| 'D' |
OPERPARM(DELMSCOPE(xx ...)) |
No |
Yes |
| 'N' |
OPERPARM(NOMSCOPE) |
No |
Yes |
| On extract requests, if
the value in the ROUTCODE field is "ALL", then the list header field will describe
one entry with the value "ALL", as opposed to an enumeration of all
128 route code values. |
| OPERAUTH (list OPERAUTN) |
'Y' |
OPERPARM(AUTH(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOAUTH) |
No |
Yes |
| ROUTCODE (list ROUTCODN) |
'Y' |
OPERPARM(ROUTCODE(xx ...) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOROUTCODE) |
No |
Yes |
| STORAGE |
'Y' |
OPERPARM(STORAGE(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOSTORAGE) |
No |
Yes |
| UD |
'Y' |
OPERPARM( UD (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOUD) |
No |
Yes |
| UNKNIDS |
'Y' |
OPERPARM(UNKNIDS(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OPERPARM(NOUNKNIDS) |
No |
Yes |
Table 14. OVM segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| FSROOT |
'Y' |
OVM(FSROOT (xx)) |
Yes |
Yes |
Yes |
| 'N' |
OVM(NOFSROOT) |
No |
Yes |
| VHOME |
'Y' |
OVM(HOME(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OVM(NOHOME) |
No |
Yes |
| VPROGRAM |
'Y' |
OVM(PROGRAM(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OVM(NOPROGRAM) |
No |
Yes |
| VUID |
'Y' |
OVM(UID(xx)) |
Yes |
Yes |
Yes |
| 'N' |
OVM(NOUID) |
No |
Yes |
Table 15. PROXY segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract Requests |
|---|
| BINDDN |
'Y' |
PROXY(BINDDN(xx)) |
Yes |
Yes |
Yes |
| 'N' |
PROXY(NOBINDDN) |
No |
Yes |
| BINDPW |
'Y' |
PROXY(BINDPW(xx)) |
Yes |
Yes |
No |
| 'N' |
PROXY(NOBINDPW) |
No |
Yes |
| LDAPHOST |
'Y' |
PROXY(LDAPHOST(xx)) |
Yes |
Yes |
Yes |
| 'N' |
PROXY(NOLDAPHOST) |
No |
Yes |
Table 16. TSO segment fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| ACCTNUM |
'Y' |
TSO( ACCTNUM (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO (NOACCTNUM ) |
No |
Yes |
| COMMAND |
'Y' |
TSO( COMMAND (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO(NOCOMMAND) |
No |
Yes |
| DEST |
'Y' |
TSO (DEST (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO( NODEST) |
No |
Yes |
| HLDCLASS |
'Y' |
TSO( HOLDCLASS (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO( NOHOLDCLASS) |
No |
Yes |
| JOBCLASS |
'Y' |
TSO( JOBCLASS (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO( NOJOBCLASS ) |
No |
Yes |
| MAXSIZE |
'Y' |
TSO(MAXSIZE (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO(NOMAXSIZE) |
No |
Yes |
| MSGCLASS |
'Y' |
TSO( MSGCLASS (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO( NOMSGCLASS ) |
No |
Yes |
| PROC |
'Y' |
TSO( PROC(xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO( NOPROC) |
No |
Yes |
| SECLABEL |
'Y' |
TSO( SECLABEL (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO( NOSECLABEL ) |
No |
Yes |
| SIZE |
'Y' |
TSO( SIZE (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO( NOSIZE) |
No |
Yes |
| SYSOUTCL |
'Y' |
TSO( SYSOUTCL (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO(NOSYSOUTCL) |
No |
Yes |
| UNIT |
'Y' |
TSO( UNIT (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO(NOUNIT ) |
No |
Yes |
| USERDATA |
'Y' |
TSO( USERDATA (xx)) |
Yes |
Yes |
Yes |
| 'N' |
TSO(NOUSERDATA) |
No |
Yes |
Table 17. WORKATTR segment
fields| Field name |
Flag byte values |
ADDUSER/ALTUSER keyword reference |
Allowed on add requests |
Allowed on alter requests |
Returned on extract requests |
|---|
| WAACCNT |
'Y' |
WORKATTR(WAACCNT (xx)) |
Yes |
Yes |
Yes |
| 'N' |
WORKATTR(NOWAACCNT) |
No |
Yes |
| WAADDR1 |
'Y' |
WORKATTR(WAADDR1 (xx)) |
Yes |
Yes |
Yes |
| 'N' |
WORKATTR(NOWADDR1) |
No |
Yes |
| WAADDR2 |
'Y' |
WORKATTR(WAADDR2 (xx)) |
Yes |
Yes |
Yes |
| 'N' |
WORKATTR(NOWADDR2) |
No |
Yes |
| WAADDR3 |
'Y' |
WORKATTR(WAADDR3 (xx)) |
Yes |
Yes |
Yes |
| 'N' |
WORKATTR(NOWADDR3) |
No |
Yes |
| WAADDR4 |
'Y' |
WORKATTR(WAADDR4 (xx)) |
Yes |
Yes |
Yes |
| 'N' |
WORKATTR(NOWADDR4) |
No |
Yes |
| WABLDG |
'Y' |
WORKATTR(WABLDG(xx)) |
Yes |
Yes |
Yes |
| 'N' |
WORKATTR(NOWABLDG) |
No |
Yes |
| WADEPT |
'Y' |
WORKATTR(WADEPT (xx)) |
Yes |
Yes |
Yes |
| 'N' |
WORKATTR(NOWADEPT) |
No |
Yes |
| WANAME |
'Y' |
WORKATTR(WANAME (xx)) |
Yes |
Yes |
Yes |
| 'N' |
WORKATTR(NOWANAME(xx)) |
No |
Yes |
| WAROOM |
'Y' |
WORKATTR(WAROOM (xx)) |
Yes |
Yes |
Yes |
| 'N' |
WORKATTR(NOWAROOM) |
No |
Yes |
z/OS Security Server RACF Callable Services
Copyright IBM Corporation 1990, 2014