One user ID may possess several privileges and one privilege may be assigned to several user IDs (with the exception of SECURITY-ADMINISTRATION and TSOS). One user ID may also have one or more privilege sets or a mixture of the two. One privilege set can be assigned to several user IDs.
A user ID must possess at least one individual privilege, since no useful work can be done under a user ID with no privileges. For this reason, the privilege STD-PROCESSING is assigned to each user ID when it is created (with ADD-USER) if no other privilege is specified. System user IDs receive the appropriate privileges. Except for the user ID of the security administrator, privileges can be assigned to or withdrawn from user IDs during normal system operation.
The security administrator can group privileges together to form privilege sets (see section“Privilege sets” and section “SRPM commands”). Individual privileges or privilege sets can be assigned to a user ID with the SET-PRIVILEGE
command. Privilege sets are not taken into account for the rule that a user ID must possess at least one individual privilege, regardless of how many system privileges a privilege set contains.