TSS0379E With Commands In Top Secret TSSWMSEC And TSSNUSEC Members

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

When the TSSWMSEC job in the Top Secret r16 CAKOJCL0 library runs, the following error occurs:

TSS0379E PERMIT AND REVOKE INVALID FOR ZONE, DIV, DEPT, AND GROUP
TSS0301I PERMIT FUNCTION FAILED, RETURN CODE = 8

The same error occurs with the following command in the TSSNUSEC member in the Top Secret r16 CAKOJCL0 library for the commands:
TSS PER(IZUADMIN) APPL(IZUDFLT)
TSS PER(IZUADMIN) EJBROLE(IZUDFLT.-.izuUsers)
TSS PER(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF) ACCESS(READ)

Environment

z/os

Cause

In member TSSWMSEC the PERMIT specified should have been against the PROFILE acid not the GROUP

Resolution

Change the TSSWMSEC job to the following command 
/* Permit the Workload Management group
*/ TSS PER(WLMPROF) IBMFAC(MVSADMIN.WLM.POLICY) ACC(UPDATE)


For the TSSNUSEC job, check the job output to see if the 

     TSS CRE(IZUADMIN) NAME('IZUADMIN PROFILE') TYPE(PROFILE) -
     DEPT(<owningacid>)

failed with:

     TSS0315E  ACID ALREADY EXISTS

If it did, someone else already created an ACID with that name. Either rename the existing IZUADMIN ACID or use a different acid than IZUADMIN in the TSSNUSEC job