Your TSO session is in group ISFOPER. Your batch job is in group ISFUSER. If the names are truly descriptive, one defines an operator who should be able to see almost everything and the other a user who is restricted to his own efforts.
-----Original Message----- From: Rich Smrcina Sent: Tuesday, March 25, 2008 1:20 PM To: [email protected] Subject: Re: More SDSF security questions In TSO, I get this from the WHO command on the P390 user: USERID=P390,PROC=DBSPROC,TERMINAL=LCL701,GRPINDEX=2,GRPNAME=ISFOPER, MVS=z/OS 01.04.00,JES2=z/OS 1.4,SDSF=HQX7707,ISPF=5.2,RMF/DA=NOTACC, and from batch: USERID=P390,PROC=BATCH,TERMINAL=BATCH,GRPINDEX=3,GRPNAME=ISFUSER,MVS=z/O S 01.04 RMF/DA=NOTACC,SERVER=YES,SERVERNAME=SDSF,JESNAME=JES2,MEMBER=SYS1,SYSNAM E=P390, I tried a jobname of P390A and I still can only see the job that I'm running. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html

