Add userid security requirements

Author: markcocker

docs/pages/cdp/cdp-Create-Zowe-CLI-profiles.md

@@ -12,14 +12,14 @@ folder: cdp
 
 This profile defines the parameters needed to connect to the z/OSMF server on z/OS. You need to know the following from your z/OS system administrator:
 
-| Parameter | Description |
+| Option | Description |
 | --- | --- |
 | host | Host name of the z/OSMF server. |
 | port | Port number of the z/OSMF server. |
 | user | User ID to identify yourself to the z/OSMF server. |
 | password | Password to identify yourself to the z/OSMF server. |
 
-**Note**: The user ID needs to have sufficient permissions to remove and create directories and files in the directory specified by `--targetdir` in the cics-deploy profile.
+**Note**: The user ID needs to have sufficient permissions to remove and create directories and files in the directory specified by `--targetdir` in the cics-deploy profile. The user ID also needs permission to submit JCL and to run the DFHDPLOY utility as described in the **Security** heading in topic [Automate the deployment and undeployment of CICS bundles and applications with the DFHDPLOY utility](https://www.ibm.com/support/knowledgecenter/SSGMCP_5.5.0/applications/deploying/dfhdploy_overview.html).
 
 For example, to create a z/OSMF profile:
 
@@ -43,16 +43,14 @@ zowe zosmf check status
 
 This profile defines the parameters needed to connect to the SSH server on z/OS. You need to know the following from your z/OS system administrator:
 
-| Parameter | Description |
+| Option | Description |
 | --- | --- |
 | host | Host name of the SSH server. |
 | port | Port number of the SSH server. This will default to 22. |
 | user | User ID to identify yourself to the SSH server. |
 | password | Password to identify yourself to the SSH server. |
 
-**Note**: It is recommended that you use the same user ID and host name to connect with SSH as is used in the z/OSMF profile, failure to do so results in undefined behaviour. When an SSH connection is made, the [z/OS shell .profile](https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.bpxa400/cupro.htm) is used to setup the shell environment and variables. The user .profile should include enviroonment variables and npm configuration required to run `npm install` in order to resolve Node.js appplication dependencies such as compiling native code. This is descibed in 
-[Installing and configuring](https://www.ibm.com/support/knowledgecenter/SSTRRS_6.0.0/com.ibm.nodejs.zos.v6.doc/install.htm).
-
+**Note**: It is recommended that you use the same user ID and host name to connect with SSH as is used in the z/OSMF profile, failure to do so results in undefined behaviour. When an SSH connection is made, the user's remote [z/OS shell .profile](https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.3.0/com.ibm.zos.v2r3.bpxa400/cupro.htm) is used to set-up the shell environment and variables. This remote .profile should include any necessary environment variables and npm configuration required to run `npm install`. This is descibed in [Installing and configuring](https://www.ibm.com/support/knowledgecenter/SSTRRS_6.0.0/com.ibm.nodejs.zos.v6.doc/install.htm).
 
 For example, to create an SSH profile:
 
@@ -76,7 +74,7 @@ zowe zos-uss issue ssh 'uname -a'
 
 This profile identifies the CICS environment for deployment. You need to know the following from your CICS system administrator:
 
-| Parameter | Description |
+| Option | Description |
 | --- | --- |
 | cicsplex | CPSM CICSplex name. |
 | cicshlq | High Level Qualifier \(HLQ\) for the CICS data sets. |