Trying to logon to IMS getting ACF2 message ACFDC207, how to check if a user has access?

Products

• CA ACF2
• CA ACF2 - DB2 Option
• CA ACF2 for zVM
• CA ACF2 - z/OS
• CA ACF2 - MISC

Issue/Introduction

ID cannot sign on to IMS and believed that to have the Privilege to sign on. Getting ACF2 message ACFDC207. Please advise.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

The ACFDC207 message is stating that you do not have the authorization.

The only way to check is to list the user and the IMS SIGNON record and make sure the user has the authorizing attribute. 

The following command will list the IMS SIGNON record to find what AUTH bit is needed to access IMS, and list IMSUSER1 and IMSUSER2 to see who has the authorization to use IMS on system IMSABC.

SET CONTROL(IMS) DIV(IMSABC)

l SIGNON

IMSABC/ SIGNON LAST CHANGED BY ABC12A ON 10/18/18-11:44
                       AUTH(IMST1) ENQNAME(IMSABC) FORMAT(ABCLOGO) NOTIFY
                       NPVERIFY PSFORMAT(ABCLOGO)

set lid
l imsuser1                                                                                                                  
IMSUSER1             ABC0123456058##IMSUSER1  OMS CONTROL REGION                                                              
                     DEPT(058) DIV(052) DOB() EID() FUNC(##) SITE(MHQ) SSN() UNIT(0996)                                      
PRIVILEGES           IMST1 JOB PROGRAM(DFSRRC00) STC                                                                         
ACCESS               ACC-CNT(1,361) ACC-DATE(11/12/19) ACC-SRCE(STCINRDR) ACC-TIME(05:21)                                    
PASSWORD             KERB-VIO(0) KERBCURV() PSWA1TOD(00/00/00-00:00) PSWA2TOD(00/00/00-00:00) PSWD-DAT(00/00/00) PSWD-INV(0) 
                     PSWD-TOD(00/00/00-00:00) PSWD-VIO(0) PSWDCVIO(0) PWP-DATE(00/00/00) PWP-VIO(0)                          
TSO                  DFT-PFX(IMSUSER1)                                                                                        
STATISTICS           CRE-TOD(00/00/00-00:00) SEC-VIO(3) UPD-TOD(11/12/19-05:21)                                              
RESTRICTIONS         GROUP(OMVSDGRP) PREFIX(IMSUSER1) 

l imsuser2                                                                                                                  
IMSUSER2             ABC0123456058##IMSUSER2 OMS CONTROL REGION                                                              
                     DEPT(058) DIV(052) DOB() EID() FUNC(##) SITE(MHQ) SSN() UNIT(0996)                                      
PRIVILEGES           IMST2 JOB PROGRAM(DFSRRC00) STC                                                                         
ACCESS               ACC-CNT(1,361) ACC-DATE(11/12/19) ACC-SRCE(STCINRDR) ACC-TIME(05:21)                                    
PASSWORD             KERB-VIO(0) KERBCURV() PSWA1TOD(00/00/00-00:00) PSWA2TOD(00/00/00-00:00) PSWD-DAT(00/00/00) PSWD-INV(0) 
                     PSWD-TOD(00/00/00-00:00) PSWD-VIO(0) PSWDCVIO(0) PWP-DATE(00/00/00) PWP-VIO(0)                          
TSO                  DFT-PFX(IMSUSER2)                                                                                        
STATISTICS           CRE-TOD(00/00/00-00:00) SEC-VIO(3) UPD-TOD(11/12/19-05:21)                                              
RESTRICTIONS         GROUP(OMVSDGRP) PREFIX(IMSUSER2)

To logon to IMSABC users need auth bit IMST1. In this instance IMSUSER1 has access, and IMSUSER2 does not.