A process receives SYSTEMUSER status if it is running under a usercode whose SYSTEMUSER usercode attribute is set. SYSTEMUSER status enables a process to use the DCKEYIN, GETSTATUS, and SETSTATUS functions in DCALGOL, even if the process does not have privileged status. A process can use these functions to submit system commands and perform other system operations functions.

By default, SYSTEMUSER status gives access to all the possible SETSTATUS calls except the SETSTATUS call of the SYSADMIN command. However, certain restrictions can apply on a system running the Secure Identification Facility.

A process can use DCKEYIN to invoke the SYSADMIN command; however, the command is rejected.