Assigning Account Numbers to User IDs

cacc enables you to control access to system resources by verifying account numbers when you assign them to a user ID.
vmx32besp
VM:Secure
enables you to control access to system resources by verifying account numbers when you assign them to a user ID.
Use the *AC= special comment to list account numbers that a user ID is allowed to use. You must have previously defined the account numbers using the ACCOUNT directory statement.
When you create a user ID or change a user ID account number (using the MAINT command), the change can apply immediately or at next logon or can be a temporary change.
VM:Secure
follows the procedure below to verify whether the new account number is valid for that user ID.
First, it scans the user ID directory entry file for any *AC= special comments for account numbers the user can use:
  • If
    VM:Secure
    finds the new account number listed on a *AC= special comment in the user ID directory entry,
    VM:Secure
    verifies the new account number and updates the new account number as you request, either at the next logon, temporarily, or immediately.
  • If
    VM:Secure
    does not find the new account number listed on a *AC= special comment in the user ID directory entry,
    VM:Secure
    calls the ACCOUNT user exit to verify the change. If you have not installed the ACCOUNT user exit or if the ACCOUNT user exit rejects the change,
    VM:Secure
    does not verify the new account number and generates an error.
If the account number is valid,
VM:Secure
next determines how to change the account number based on whether you use the
VM:Account
interface:
  • If you use the
    VM:Account
    interface, all account number changes take effect immediately and are permanent.
    VM:Account
    issues DIAGNOSE X’84’ to update the VMDBK, and
    VM:Secure
    updates the CP directory for the next logon.
  • If you do not use the
    VM:Account
    interface, and you have selected either an immediate change or one at the next logon,
    VM:Secure
    updates the new account number in the CP directory. If you have selected either an immediate or temporary change,
    VM:Secure
    also updates the VMDBK using DIAGNOSE X’84’.
For information, see the ACCOUNT user exit in the section "User Exit Reference" in the
Reference
. For more information about the
VM:Account
interface, see the
Mainframe VM Product Manager
Product Interface Guide
.