We do not use RACF as our ESM, but year ago, I recall having to give
OPER authority under the TSO ACCOUNT command in order for users to issue the
TSO CONSOLE command.
Perhaps one of your users has this and one does NOT.
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf
Of Burrell, Todd
Sent: Wednesday, August 16, 2017 12:09 PM
To: [email protected]
Subject: Re: CONSOLE command failing - what else to check?
Neither have an OPERPARM segment.
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf
Of Mark Jacobs - Listserv
Sent: Wednesday, August 16, 2017 12:03 PM
To: [email protected]
Subject: Re: CONSOLE command failing - what else to check?
Does the falling user have an OPERPARM segment in their RACF profile?
> Todd Burrell <mailto:[email protected]> August 16, 2017 at 11:52 AM
> I have 2 users and one can successfully execute the CONSOLE command
> while running it in a started task and in batch, but the other user
> cannot. From what I can tell they are both connected to the same RACF
> groups and both should have all of the necessary access required to
> run the CONSOLE command - but one fails with a RC 36 which indicates
> they are not authorized? Also, there are no RACF error messages for
> the failing user - and nothing when I ran RACFICE this morning in the
> violation report?
>
> I seem to remember there is something else that might need to get
> changed in TSO? Does anyone have anything else I can check?
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions, send
> email to [email protected] with the message: INFO IBM-MAIN
>
>
> Please be alert for any emails that may ask you for login information
> or directs you to login via a link. If you believe this message is a
> phish or aren't sure whether this message is trustworthy, please send
> the original message as an attachment to '[email protected]'.
>
--
Mark Jacobs
Time Customer Service
Global Technology Services
The standard you walk past is the standard you accept.
Lt. Gen. David Morrison
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to
[email protected] with the message: INFO IBM-MAIN
This email transmission and any accompanying attachments may contain CSX
privileged and confidential information intended only for the use of the
intended addressee. Any dissemination, distribution, copying or action taken in
reliance on the contents of this email by anyone other than the intended
recipient is strictly prohibited. If you have received this email in error
please immediately delete it and notify sender at the above CSX email address.
Sender and CSX accept no liability for any damage caused directly or indirectly
by receipt of this email.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to
[email protected] with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
