Authorize the TCP/IP started task user ID by using the following command to assign an OMVS segment to the TCP/IP started task user ID specified as UID=0;
ADDGROUP OMVSGRP OMVS(GID(1))
ADDUSER TCPIP DFLTGRP (OMVSGRP) OMVS(UID(0) HOME('/') PROGRAM('bin/sh'))
RDEFINE STARTED TCPIPROC.* STDATA(USER(TCPIP) GROUP(OMVSGRP))
Grant superuser authority to OMPROUTE:
RDEFINE STARTED OMPROUTE.* STDATA(USER(TCPIP) GROUP(OMVSGRP))
For dynamic routing, enable OMPROUTE RACF authorization for a particular user ID by entering the following commands with the ID of the user or with the ID of the started task to be authorized:
RDEFINE OPERCMDS (MVS.ROUTEMGR.OMPROUTE) UACC(NONE)
PERMIT MVS.ROUTEMGR.OMPROUTE ACCESS(CONTROL) CLASS(OPERCMDS) ID(userid)
SETROPTS RACLIST(OPERCMDS) REFRESH