Steps for creating z/OS UNIX groups

Before you begin: You need to know which RACF® group profiles will be used as z/OS UNIX groups.

Perform the following steps to define RACF groups that can be used as z/OS UNIX groups.

Log on to the user ID with RACF SPECIAL authority.
_______________________________________________________________

Issue one of the following commands. Base your choice on your particular situation.

This table shows the tasks for creating z/OS® UNIX groups.

If you want to . . . Then issue. . .

If you want to . . .	Then issue. . .
Define a new RACF group profile and have it be used as a z/OS UNIX group	The ADDGROUP command. Example: To define a RACF group profile named SYS1 and to give it a GID of 575, issue: `ADDGROUP OMVSGRP SUPGROUP(SYS1) OWNER(SYS1) OMVS(GID(575))` Result: You have defined a RACF group profile and created a z/OS UNIX group.
Change a current RACF group profile and have it used as a z/OS UNIX group	The ALTGROUP command. Example: To add a GID of 678 to the current RACF group ENGNGP7, issue: `ALTGROUP ENGNGP7 OMVS(GID(678))` Result: You have created a z/OS UNIX group. Use AUTOGID to automatically assign an unused GID. For example: `ALTGROUP ENGNGP7 OMVS(AUTOGID)` To assign OMVS GIDs to all groups, use the ISPF shell.

Define a new RACF group profile and have it be used as a z/OS UNIX group

The ADDGROUP command.

Example: To define a RACF group profile named SYS1 and to give it a GID of 575, issue:

ADDGROUP OMVSGRP SUPGROUP(SYS1)
  OWNER(SYS1) OMVS(GID(575))

Result: You have defined a RACF group profile and created a z/OS UNIX group.

Change a current RACF group profile and have it used as a z/OS UNIX group

The ALTGROUP command.

Example: To add a GID of 678 to the current RACF group ENGNGP7, issue:

ALTGROUP ENGNGP7 OMVS(GID(678))

Result: You have created a z/OS UNIX group.

Use AUTOGID to automatically assign an unused GID. For example:

ALTGROUP ENGNGP7 OMVS(AUTOGID)

To assign OMVS GIDs to all groups, use the ISPF shell.

Tip: For useful reports and auditing, assign a unique GID to each RACF group name. Reports for the RACF group name will then supply information about the corresponding GID.

_______________________________________________________________

When you are done, you have created a z/OS UNIX group. When the user connects to the system (for example, logs on to a TSO/E session), one group is selected as the user's current group. When a user becomes a z/OS UNIX user, the GID of the user's current group becomes the effective GID of the user's process. The user can access resources available to members of the user's effective GID.