Privileges in POSIX

This table shows who is authorized to do what in POSIX:

Privilege	Authorization to
Operator (OPERATING privilege)	Start POSIX: /START-SUBSYSTEM SUBSYSTEM-NAME=POSIX
	Stop POSIX: /STOP-SUBSYSTEM SUBSYSTEM-NAME=POSIX
Subsystem administrator (SUBSYSTEM-MANAGEMENT privilege)	Show POSIX status: /SHOW-POSIX-STATUS
	Start POSIX: /START-SUBSYSTEM SUBSYSTEM-NAME=POSIX
	Stop POSIX: /STOP-SUBSYSTEM SUBSYSTEM-NAME=POSIX
Security administrator (SECURITY-ADMINISTRATION privilege)	Grant or withdraw the POSIX-ADMINISTRATION privilege to or from BS2000 IDs (except SYSROOT): /SET-PRIVILEGE /RESET-PRIVILEGE
BS2000 system administrator (USER-ADMINISTRATION privilege, but no root administrator)	Change values of the tuning parameters in the POSIX information file SYSSSI.POSIX-BC.version
	Administer new POSIX users: /ADD-USER and other measures
	Assign individual POSIX user attributes to BS2000 user IDs: /MODIFY-POSIX-USER-ATTRIBUTES
	Administer POSIX user attributes: /MODIFY-POSIX-USER-ATTRIBUTES /SHOW-POSIX-USER-ATTRIBUTES
	Administer default values for POSIX user attributes: /MODIFY-POSIX-USER-DEFAULTS /SHOW-POSIX-USER-DEFAULTS
	Administer access rights for users of remote terminals: /SET-LOGON-PROTECTION /MODIFY-LOGON-PROTECTION /SHOW-LOGON-PROTECTION
	Administer account numbers for system access via remote terminals: /ADD-USER /MODIFY-USER-ATTRIBUTES /SHOW-USER-ATTRIBUTES
	Administer POSIX groups/users: GROUP-NUMBER user attribute
BS2000 system administrator (USER-ADMINISTRATION privilege and also root administrator)	Perform all tasks of a BS2000 system administrator without root authorization, and also:
	Install POSIX: POSIX installation program
	Create, modify and delete POSIX file systems: POSIX installation program
POSIX administrator (POSIX- ADMINISTRATION privilege and also root authorization)	Administer new POSIX users /ADD-USER and other measures
	Remove POSIX users /MODIFY-POSIX-USER-ATTRIBUTES
	Create, modify and delete POSIX file systems: POSIX installation program
	Mount and unmount POSIX file systems: mount and mountall; umount and umountall
	Administer POSIX user attributes: /MODIFY-POSIX-USER-ATTRIBUTES /SHOW-POSIX-USER-ATTRIBUTES
	Administer default values for POSIX user attributes: /MODIFY-POSIX-USER-DEFAULT /SHOW-POSIX-USER-DEFAULTS
	Administer BS2000 and POSIX groups: GROUP-NUMBER user attribute, file /etc/group
Root authorization (user number 0, group number 0)	Administer POSIX groups in POSIX: file /etc/group
	Remove POSIX users: rmdir
BS2000 group administrator (group *UNIVERSAL)	Administer POSIX user attributes (with restrictions): /MODIFY-POSIX-USER-ATTRIBUTES /SHOW-POSIX-USER-ATTRIBUTES
	Administer default values for POSIX user attributes (with restrictions): /MODIFY-POSIX-USER-DEFAULTS /SHOW-POSIX-USER-DEFAULTS
	Administer access rights for the user of a remote terminal (with restrictions): /SET-LOGON-PROTECTION /MODIFY-LOGON-PROTECTION /SHOW-LOGON-PROTECTION
	Administer account numbers for system access from remote terminals (with restrictions): /ADD-USER /MODIFY-USER-ATTRIBUTES /SHOW-USER-ATTRIBUTES
	Administer POSIX groups/users user attribute GROUP-NUMBER
Nonprivileged POSIX users (privilege STD-PROCESSING)	Output information on the entries in the user catalog for their own user IDs /SHOW-USER-ATTRIBUTES /SHOW-POSIX-USER-ATTRIBUTES