BS2000 systems support uses privilege assignment to define which user ID receives an authorization for tape management, see the “System Administration” manual [8]. The privilege provides authorization to perform the corresponding administration tasks of MAREN.
The MAREN administrator works on a user ID which has the privilege TAPE-ADMINISTRATION.
Some tasks additionally require a particular user ID or the operator role which is entered in the system-specific MAREN parameters is also required for some tasks. The default is the operator role SYSMAREN.
The table below shows the minimum authorization which a MAREN user (or his/her user ID) must have in order to work with the various MAREN components and MARENADM statements.
| MAREN components or MARENADM statements | Minimum authorization | ||||||||||||
| MAREN user program | STD-PROCESSING | ||||||||||||
| MARENADM administrator program | TAPE-ADMINISTRATION privilege | ||||||||||||
| MARENCP control program | TAPE-ADMINISTRATION privilege | ||||||||||||
| Automatic free tape allocation MARENUCP | Operator role which is defined in the MAREN parameters (default: SYSMAREN) TAPE-ADMINISTRATION privilege | ||||||||||||
| MARENLM utility routine | TAPE-ADMINISTRATION privilege | ||||||||||||
|
| ||||||||||||
TAPE-ADMINISTRATION privilege
The privilege TAPE-ADMINISTRATION authorizes an user ID to perform tape management tasks.
In a BS2000 system using the software product SECOS. The software product SECOS enables the standard privilege assignment of BS2000 to be changed. Systems support can allocate the TAPE-ADMINISTRATION privilege to any user ID.
In a BS2000 system without SECOS. In addition to TSOS, the user ID SYSMAREN is by default configured with the TAPE-ADMINISTRATION privilege.
The MARENADM statements CHECK-TSOSCAT and ADD-RESERVED-VOLUMES with the VOLUME=*BY-TSOSCAT operand can only be entered under the system user ID TSOS.
MARENADM can be started under any IDs if systems support makes the user syntax file SYSSDF.MAREN.<ver>.USER supplied available for these IDs and has assigned an administrator password (see the MARENADM statements MODIFY-MAREN-PARAMETERS and MODIFY-GLOBAL-PARAMETERS). MAREN users legitimate themselves as the MAREN administrator by entering the password in their password table (command ADD-PASSWORD).
Operator role
For MARENUCP and the MARENADM statement INITIALIZE-VOLUMES, a particular operator role is required for the connection to UCON. This operator role is entered in the system-specific MAREN parameters (the default is SYSMAREN). Under the SYSPRIV user ID this operator role must be configured once for the authorized user ID using the following commands, e.g. for SYSMAREN:/CREATE-OPERATOR-ROLE OPERATOR-ROLE=SYSMAREN,ROUTING-CODES=(A,E,G,P,T)
/MODIFY-OPERATOR-ATTRIBUTES USER-ID=<userid>,ADD-OPERATOR-ROLE=SYSMAREN
If the operator role SYSMAREN is already configured, check whether all routing codes (especially the routing code G) are assigned. You can assign the missing routing codes as follows:/MODIFY-OPERATOR-ROLE OPERATOR-ROLE=SYSMAREN,ADD-ROUTING-CODES=<code>