The LIST subcommand lets a logonid with the account, security, or audit privilege display logonid records.
As a security administrator, you want to see what privileges a logonid is assigned. The LIST subcommand lets a logonid with the account, security, or audit privilege display logonid records. The logonids with the consult or leader privilege can list logonids within their scope. Any user can list their own logonid record.
LIST * 'LOGONID' LIKE(LOGONID-MASK) UID(UID-MASK) IF(FIELD1, ...FIELDN) SECTION(NAME1, ...,NAMEN) PROFILE(NAME1, ...,NAMEN) TARGET(null/=/?=/NODEMASK1, ...,NODEMASKN) ARCHIVE INTO(dsname(member))
Example: Display a logonid record
As a security administrator, you have the SECURITY privilege, which allows you to list other logonid records.
ACF acf LIST USER01 USER01 USER01 COMPANY(NAME) DEPT(ACCT) PRIVILEGES ACCOUNT CICS PASSWORD ACC-TIME(09:10) ADD-DATE(00/00/00) PSWD-DAT(02/27/21) PSWD-TIM(12:13) TSO ACCTPRIV ...
In this example, logonid for USER01 displays.
- ASTERISK(*)Specifies the last logonid record that you referenced in this session you want to display.
- LOGONIDSpecifies the logonid record or user profile record you want to display.
- LIKE (LOGONID-MASK)Specifies a one- to eight-character mask for the group of logonid records or user profile records you want to display.
- UID (UID-MASK)Specifies a one- to 24-character mask for the group of logonid records or user profile records you want to display. The UID mask that is specified must include an explicit masking character. Implied masking characters are added at the end for strings less than 24-characters.
- IF (FIELD1, ...FIELDN)Specifies the attributes (by field name) used to determine the logonid records that are listed. Separate the multiple field names with commas. This parameter can also be formatted similar to a high-level programming language IF statement.
- SECTION (NAME1, ...,NAMEN)Specifies the name of one or more sections you want to display. NAME can be ALL, HEADER, or LOGONID-GROUP-NAME.
- PROFILE (NAME1, ...,NAMEN)Specifies the name of one or more types of user profile information you want to display. NAME can be ALL or USER-PROFILE-TYPE.
- TARGET (NULL/=/?=/NODEMASK1, ...,NODEMASKN)Identifies the node or nodes where lists are to occur.
- ARCHIVEActivates building the commands that are used to recreate a user and re-add the user to any role within which they are included.
- INTO (DSNAME(MEMBER))Specifies the specific dataset name and member that would be used to store the output of the archive. If not specified, output of the archive displays to the terminal.