ID cannot sign on to IMS and believed that to have the Privilege to sign on. Getting ACF2 message ACFDC207. Please advise.
Release : 16.0
Component : CA ACF2 for z/OS
The ACFDC207 message is stating that you do not have the authorization.
The only way to check is to list the user and the IMS SIGNON record and make sure the user has the authorizing attribute.
The following command will list the IMS SIGNON record to find what AUTH bit is needed to access IMS, and list IMSUSER1 and IMSUSER2 to see who has the authorization to use IMS on system IMSABC.
SET CONTROL(IMS) DIV(IMSABC)
l SIGNON
IMSABC/ SIGNON LAST CHANGED BY ABC12A ON 10/18/18-11:44 AUTH(IMST1) ENQNAME(IMSABC) FORMAT(ABCLOGO) NOTIFY NPVERIFY PSFORMAT(ABCLOGO)
set lid
l imsuser1
IMSUSER1 ABC0123456058##IMSUSER1 OMS CONTROL REGION
DEPT(058) DIV(052) DOB() EID() FUNC(##) SITE(MHQ) SSN() UNIT(0996)
PRIVILEGES IMST1 JOB PROGRAM(DFSRRC00) STC
ACCESS ACC-CNT(1,361) ACC-DATE(11/12/19) ACC-SRCE(STCINRDR) ACC-TIME(05:21)
PASSWORD KERB-VIO(0) KERBCURV() PSWA1TOD(00/00/00-00:00) PSWA2TOD(00/00/00-00:00) PSWD-DAT(00/00/00) PSWD-INV(0)
PSWD-TOD(00/00/00-00:00) PSWD-VIO(0) PSWDCVIO(0) PWP-DATE(00/00/00) PWP-VIO(0)
TSO DFT-PFX(IMSUSER1)
STATISTICS CRE-TOD(00/00/00-00:00) SEC-VIO(3) UPD-TOD(11/12/19-05:21)
RESTRICTIONS GROUP(OMVSDGRP) PREFIX(IMSUSER1)
l imsuser2
IMSUSER2 ABC0123456058##IMSUSER2 OMS CONTROL REGION
DEPT(058) DIV(052) DOB() EID() FUNC(##) SITE(MHQ) SSN() UNIT(0996)
PRIVILEGES IMST2 JOB PROGRAM(DFSRRC00) STC
ACCESS ACC-CNT(1,361) ACC-DATE(11/12/19) ACC-SRCE(STCINRDR) ACC-TIME(05:21)
PASSWORD KERB-VIO(0) KERBCURV() PSWA1TOD(00/00/00-00:00) PSWA2TOD(00/00/00-00:00) PSWD-DAT(00/00/00) PSWD-INV(0)
PSWD-TOD(00/00/00-00:00) PSWD-VIO(0) PSWDCVIO(0) PWP-DATE(00/00/00) PWP-VIO(0)
TSO DFT-PFX(IMSUSER2)
STATISTICS CRE-TOD(00/00/00-00:00) SEC-VIO(3) UPD-TOD(11/12/19-05:21)
RESTRICTIONS GROUP(OMVSDGRP) PREFIX(IMSUSER2)
To logon to IMSABC users need auth bit IMST1. In this instance IMSUSER1 has access, and IMSUSER2 does not.