Identifying users

RACF® controls the interaction between users and resources. You define resources and the level of access allowed by users to these resources in RACF® profiles. A user is an alphanumeric user ID that RACF® associates with the user.

IBM® Z Workload Scheduler needs access to non-IBM® Z Workload Scheduler resources for the work it schedules. The user ID associated with IBM® Z Workload Scheduler can be obtained from:
  • The IBM® Z Workload Scheduler address space that accesses data sets used by the work it schedules, and that submits work and issues JES and z/OS commands.
  • The user= parameter on the JOB card of a batch job.
  • The IBM® Z Workload Scheduler job-submit exit, EQQUX001, which is called when IBM® Z Workload Scheduler is about to submit a job or start a started task, and which can pass back a user ID.
  • The USRREC statement, which specifies the name and password of the user on a supported Windows™ workstation.
  • The LOCALPSW statement, which specifies whether the name and password of a user on a Windows™ workstation is defined either on z/OS® using the USRREC statement (LOCALPSW set to NO) or on the Windows™ workstation using a local file (LOCALPSW set to YES). If you set LOCALPSW to YES, the scheduler looks for the USRREC statement first, then for the local file.
  • The USERMAP keyword of the SERVOPTS statement.
User IDs that access IBM® Z Workload Scheduler resources can be:
  • A TSO user ID that accesses the IBM® Z Workload Scheduler dialogs, submits batch jobs that access IBM® Z Workload Scheduler resources, and issues IBM® Z Workload Scheduler TSO commands.
  • An IBM® Z Workload Scheduler address space, which must be permitted access to IBM® Z Workload Scheduler resources.
  • Other started-task address spaces that pass requests to an IBM® Z Workload Scheduler address space.
  • A user ID supplied by a transaction program (TP) that uses the IBM® Z Workload Scheduler API to communicate with the Z controller.
  • A user ID defined by the USERMAP keyword of the SERVOPTS statement to work with Dynamic Workload Console.