In TPXADMIN you have panel TEN0169, where Administrator Capabilities are assigned:
-------------------------------------------------------------------------------
TPX User Maintenance
Panelid - TEN0169
Command ===> Userid - USER#1
Termid - TERM01
Userid: PIEAL01 Date - 12/28/16
Time - 13:30:55
TPX User Administrator: Y STX User Administrator: N
TPX Master Administrator: Y STX Master Administrator: N
TPX System Administrator: Y STX System Administrator: N
TPX Operator Administrator: Y
Groups this User Administrator can modify:
TPXGROUP
SALES
SUPPORT
************************** BOTTOM OF DATA *************************
(This panel is reached in TPXADMIN, '1 - TPX User/Group Maintenance', '3 - User Maintenance', then enter desired userid, then select '6 - Maintain Administrator Capabilities').
The settings in panel '6 - Maintain Administrator Capabilities' can be changed using the following SYSIN-Statements:
To provide a user with Administrative Authority for User-Management, Master Administration, System Management and Operator Management you need these statements:
//SYSIN DD
UPDATE USER (userid (UIDXCADM({Y|N})))
UPDATE USER (userid (UIDXCMST({Y|N})))
UPDATE USER (userid (UIDXCSYS({Y|N})))
UPDATE USER (userid (UIDXCOPR({Y|N})))
/*
The User Administrator Authority is represented by field UIDXCADM, Master Administrator Authority is represented by field UIDXCMST, System Administrator Authority is represented by field UIDXCSYS and Operator Administrator Authority is represented by field UIDXCOPR.
You can reference more than one Authority in an UPDATE-Statement. This statement provides User SMITH User Update Authority but denies Master Authority:
//SYSIN DD
UPDATE USER (SMITH (UIDXCADM(Y) UIDXCMST(N)))
/*
To maintain the list of groups under the title "Groups this User Administrator can modify" you use these two statements:
To add the group group-name to the user userid:
//SYSIN DD
ADD USERMAGN (userid group-name)
/*
If several groups need to be added to a user you need several of these statements, you can't add multiple groups to a user in one USERMAGN-Statement; instead you group several USERMAGN-Statements in one SYSIN:
//SYSIN DD
ADD USERMAGN (userid group-name_1)
ADD USERMAGN (userid group-name_2)
ADD USERMAGN (userid group-name_3)
/*
If you want to remove a group from a user’s responsibility you use DELETE:
//SYSIN DD
DELETE USERMAGN (userid group-name)
/*