CIA Unload job fails with TSSC001E

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

We just started to get RC=12 and TSSC001E message running cia unload job. 

TSSC001E
USER DOES NOT HAVE AUTHORITY TO RUN THIS UTILITY 

Reason: 

The CA Top Secret CIA Unload Utility must be executed by the MSCA. The CA Top Secret CIA Unload Utility terminates. 

Action: 

Have the MSCA run the CA Top Secret Unload Utility. Published by Scroll Versions from space CTSFZM.

But we don't want to use MSCA  to run batch jobs.

What are other options? Can we use other ADMIN authorities?

Environment

Release:
Component: TSSMVS

Resolution

Yes, that's correct only the MSCA can run the TSSCIALD, at least this documented like this.

Nevertheles, you can run this TSS utility with an SCA. But, some conditions are mandatory.

Here they are:
Running acid must be an SCA
This SCA must have the CONSOLE attribute.
This SCA must have either MISC1(RDT) or MISC8(LISTRDT)
This SCA must have MISC8(LISTSDT)
This SCA must have MISC9(GENERIC) This SCA must have DATA(ALL)

We would suggest you to create (if not already done) an "alternate" MSCA, i.e. an SCA with all authorities and all attributes (but TRACE).
And you may permit with TSS PER(MySCA) ACID(MSCA) in order to allow him to submit batch job on behalf of the MSCA.