z/VM: CP Commands and Utilities Reference - z/VM - IBM

Examples
Responses
Messages
SECUSER command to determine another user ID’s secondary user. For more
information, see “QUERY SECUSER” on page 988.
2. You cannot use this command if an external security manager is installed on
your system and security label checking is enabled. For additional information,
contact your security administrator.
The following is an example of how USERA (a general user) removes itself as the
secondary user of USERB.
SET SECUSER USERB OFF
Response 1:
If you use the class A or class C SET SECUSER command to assign someone as
secondary user to another virtual machine, the user ID that becomes the secondary
user receives the message:
SECUSER of targetid initiated for you by userid.
At the same time, the user ID whose secondary ID you have changed receives one
of the following messages:
Your SECUSER set to userid by userid.
-or-
Your SECUSER terminated by userid.
Response 2:
When you wish to remove the secondary user for the specified user ID, you can
enter SET SECUSER targetid OFF. This causes the user ID that was the secondary
user to receive the message:
SECUSER of targetid terminated for you by userid.
Response 3:
HCP002E Invalid operand - operand
If the command issuer becomes the secondary user, the response at initiation is:
SECUSER of targetid initiated.
When the secondary user option is terminated, the response is:
SECUSER of targetid terminated.
HCP003E Invalid option - command contains
extra option(s) beginning with option
HCP007E Invalid userid - userid
HCP017E User userid is being observed and
cannot have a SECUSER
HCP026E Operand missing or invalid
HCP045E userid not logged on
HCP053E userid not in CP directory
SET SECUSER
HCP0150E User userid has issued a CP or VM
read.
Chapter 2. CP Commands 1381