You must prepare user IDs for each started task to use. For details, see Preparing User IDs for the Started Tasks.
These user IDs have special requirements.
The change log started task must run as a user that can update the change log data set.
The driver shim started task user must have rights to update the change log data set and to perform the Subscriber channel actions carried out by the REXX execs, such as creating and modifying users and groups, defining alias information in the catalog, and creating home directories. For details about using the TSS ADMIN command to assign administrative authorities, see your CA Top Secret Security for z/OS Command Functions Guide.