z/VM: CP Commands and Utilities Reference - z/VM - IBM

Privilege Classes
The set of CP commands that you can use depends upon the privilege class or
classes that have been assigned to you.
CP commands are divided into eight groups, each represented by a privilege class.
The privilege class indicates the type of user from whom the system accepts
commands.
In general, the system programmer who creates your system directory assigns you
one or more privilege classes as part of your entry in the directory.
Privilege classes are denoted by the letters A through Z, the numbers 1 through 6,
or the word “Any.” These classes, and the type of user who can use the commands
belonging to each privilege class set, are summarized in Table 2. Classes I through
Z and numbers 1 through 6 are reserved so that your installation can define them to
suit its needs.
If you are authorized for some options of a command but not for others and you
enter an unauthorized option, your command will be interpreted in the formats for
which you are authorized. This may cause the command to either:
v execute in an unexpected fashion, or
v reflect an unexpected message.
Users whose password is NOLOG have no privilege class and can only receive
spooled output as punched cards or printed forms. The NOLOG assignment is
controlled by directory control statements; see z/VM: CP Planning and
Administration for more information about NOLOG users.
Table 2. Privilege Classes
Class User and Function
A System Operator: The class A user controls the z/VM system. The system
operator is responsible for the availability of the z/VM system and its
resources. In addition, the system operator controls system accounting,
broadcast messages, virtual machine performance options, and other options
that affect the overall performance of z/VM.
Note: The class A user who is automatically logged on during CP
initialization is designated as the primary system operator.
B System Resource Operator: The class B user controls all the real resources
of the z/VM system, except those controlled by the system operator and the
spooling operator.
C System Programmer: The class C user updates or changes system-wide
parameters of the z/VM system.
D Spooling Operator: The class D user controls spool files and the system’s
real reader, printer, and punch equipment allocated to spooling use.
E System Analyst: The class E user examines and saves system operation data
in specified z/VM storage areas.
F Service Representative: The class F user obtains, and examines in detail,
data about input and output devices connected to the z/VM system. This
privilege class is reserved for IBM use only.
G General User: The class G user controls functions associated with a
particular virtual machine.
Introduction
Chapter 1. Introduction 7