ENCLAVES - to control access to enclaves
      PROCESS  - to control access to UNIX processes
      THREADS  - to control access to process threads
                 (THREADS access is inherited from PROCESS
                  so normally is not required)

The MPI install process added ENCLAVES and PROCESS resources to the B21ACESS option.

ALLOW macros are required in the B23ALLOW option in order to grant access to these recources.

Started tasks and members of the OPERATOR group most likely can use the ENC and PS commands because of parms in the A60ACF option.

Permit users in the SPGMR IOF group to browse and manage all ENCLAVES.

    ALLOW 4,4,ENCLAVES,*,GROUP=SPGMR

Permit allow users to see ENCLAVES but not manage them.

    ALLOW 1,0,ENCLAVES,*,ID=*

Permit users in the SPGMR IOF group full access to UNIX processes
and process threads

    ALLOW 4,4,PROCESS,*,GROUP=SPGMR

Permit all users full access to UNIX processes they own.

    ALLOW 4,4,PROCESS,OWNER,'/U',ID=*