Assigning Account Numbers to User IDs
cacc enables you to control access to system resources by verifying account numbers when you assign them to a user ID.
VM:Secureenables you to control access to system resources by verifying account numbers when you assign them to a user ID.
Use the *AC= special comment to list account numbers that a user ID is allowed to use. You must have previously defined the account numbers using the ACCOUNT directory statement.
When you create a user ID or change a user ID account number (using the MAINT command), the change can apply immediately or at next logon or can be a temporary change.
VM:Securefollows the procedure below to verify whether the new account number is valid for that user ID.
First, it scans the user ID directory entry file for any *AC= special comments for account numbers the user can use:
- IfVM:Securefinds the new account number listed on a *AC= special comment in the user ID directory entry,VM:Secureverifies the new account number and updates the new account number as you request, either at the next logon, temporarily, or immediately.
- IfVM:Securedoes not find the new account number listed on a *AC= special comment in the user ID directory entry,VM:Securecalls the ACCOUNT user exit to verify the change. If you have not installed the ACCOUNT user exit or if the ACCOUNT user exit rejects the change,VM:Securedoes not verify the new account number and generates an error.
If the account number is valid,
VM:Securenext determines how to change the account number based on whether you use the
- If you use theVM:Accountinterface, all account number changes take effect immediately and are permanent.VM:Accountissues DIAGNOSE X’84’ to update the VMDBK, andVM:Secureupdates the CP directory for the next logon.
- If you do not use theVM:Accountinterface, and you have selected either an immediate change or one at the next logon,VM:Secureupdates the new account number in the CP directory. If you have selected either an immediate or temporary change,VM:Securealso updates the VMDBK using DIAGNOSE X’84’.
For information, see the ACCOUNT user exit in the section "User Exit Reference" in the.
Reference. For more information about the
VM:Accountinterface, see the
Mainframe VM Product ManagerProduct Interface Guide