When the TSSWMSEC job in the Top Secret r16 CAKOJCL0 library runs, the following error occurs:
TSS0379E PERMIT AND REVOKE INVALID FOR ZONE, DIV, DEPT, AND GROUP
TSS0301I PERMIT FUNCTION FAILED, RETURN CODE = 8
The same error occurs with the following command in the TSSNUSEC member in the Top Secret r16 CAKOJCL0 library for the commands:
TSS PER(IZUADMIN) APPL(IZUDFLT)
TSS PER(IZUADMIN) EJBROLE(IZUDFLT.-.izuUsers)
TSS PER(IZUADMIN) ZMFAPLA(IZUDFLT.ZOSMF) ACCESS(READ)
z/os
In member TSSWMSEC the PERMIT specified should have been against the PROFILE acid not the GROUP
Change the TSSWMSEC job to the following command
/* Permit the Workload Management group
*/ TSS PER(WLMPROF) IBMFAC(MVSADMIN.WLM.POLICY) ACC(UPDATE)
For the TSSNUSEC job, check the job output to see if the
TSS CRE(IZUADMIN) NAME('IZUADMIN PROFILE') TYPE(PROFILE) -
DEPT(<owningacid>)
failed with:
TSS0315E ACID ALREADY EXISTS
If it did, someone else already created an ACID with that name. Either rename the existing IZUADMIN ACID or use a different acid than IZUADMIN in the TSSNUSEC job