Is it possible to give a more specific permission than:
TSS PER(acid) CASECAUT(TSSCMD.ADMIN.MODIFY) ACC(PRIVILEG)
So that an operator has permission to perform a temporary shutdown, without the equivalent of the entire CONSOLE option?
As an suggested permission, perhaps:
TSS PER(acid) CASECAUT(TSSCMD.ADMIN.MODIFY.STOP) ACC(PRIVILEG)
If such a permission exists, it is not well documented. It would be extremely useful in providing operators with finely tuned permission to shutdown TSS.