Example 1: Group structure after first startup
The group structure that is created during the first startup of the operating system consists simply of the user group *UNIVERSAL. Its group members are the user IDs that are created automatically by the operating system.
User group *UNIVERSAL
Root of the group structure | group ID *UNIVERSAL |
Group members | all system IDs (e.g. SERVICE, SYSHSMS, SYSPRIV, TSOS) |
Group administrator | none |
Group administration performed by | user ID TSOS, since TSOS is automatically assigned the global USER-ADMINISTRATION privilege |
Subgroups | none |
Figure 3: Group structure after first startup
Example 2: Single-level group structure
Predefinition:
Global user administration: user ID TSOS
User group *UNIVERSAL
Root of the group structure | group ID *UNIVERSAL |
Group members | all system IDs (e.g. SERVICE, SYSHSMS, SYSPRIV, TSOS) |
Group administrator | none 1 |
Group administration performed by | user ID TSOS |
Subgroups | GROUP01, GROUP02, GROUP03 |
1Function accumulation means that TSOS cannot be group administrator. It already has the global user administration right.
User group GROUP01
Group members | user IDs uid11, uid12, uid13 |
Group administrator | user ID uid11 |
Group administration performed by | user IDs TSOS, uid11 |
Subgroups | none |
User group GROUP02
Group members | user IDs uid21, uid22, uid23 |
Group administrator | none |
Group administration performed by | user ID TSOS |
Subgroups | none |
User group GROUP03
Group members | user IDs uid31, uid32, uid33, uid34 |
Group administrator | user ID uid33 |
Group administration performed by | user IDs TSOS, uid33 |
Subgroups | none |
Figure 4: Single-level group structure
Example 3: Multi-level group structure
Predefinition: | user ID TSOS |
User group *UNIVERSAL
Root of the group structure | group ID *UNIVERSAL |
Group member | all system IDs (e.g. SERVICE, SYSHSMS, SYSPRIV, TSOS) (see Example 1) |
Group administrator | none 1 |
Group administration performed by | user ID TSOS |
Subgroups | GROUP01, GROUP02, GROUP03 |
1Function accumulation means that TSOS cannot be group administrator. It already has the global user administration right.
User group GROUP01
Group members | user IDs uid11, uid12, uid13 |
Group administrator | user ID uid11 |
Group administration performed by | user IDs TSOS, uid11 |
Subgroups | GROUP04 |
User group GROUP02
Group members | user IDs uid21, uid22, uid23 |
Group administrator | none |
Group administration performed by | user ID TSOS |
Subgroups | GROUP05 |
User group GROUP03
Group members | user IDs uid31, uid32, uid33, uid34 |
Group administrator | user ID uid33 |
Group administration performed by | user IDs TSOS, uid33 |
Subgroups | none |
User group GROUP04
Group members | user IDs uid41, uid42, uid43, uid44, uid45 |
Group administrator | user ID uid43 |
Group administration performed by | user IDs TSOS, uid11 and uid43 |
Subgroups | none |
User group GROUP05
Group members | user ID uid51 |
Group administrator | none |
Group administration performed by | user ID TSOS |
Subgroups | GROUP06 |
User group GROUP06
Group members | user IDs uid61, uid62, uid63 |
Group administrator | user ID uid61 |
Group administration performed by | user IDs TSOS and uid61 |
Subgroups | GROUP07 |
User group GROUP07
Group members | user IDs uid71, uid72, uid73 |
Group administrator | user ID uid73 |
Group administration performed by | user IDs TSOS, uid61 and uid73 |
Subgroups | none |
Figure 5: Multi-level group structure