TSS7251E Access Denied to CASECAUT <TSSCMD.ADMIN.MODIFY>
Environment
Release : 16.0
Component : CA Top Secret for z/OS
Resolution
The CASECAUT permission for MODIFY commands does not support specific commands, which is why using TSSCMD.ADMIN.MODIFY.STATUS fails. The check is only for TSSCMD.ADMIN.MODIFY.
For MODIFY commands which only provide status or display information, such as the STATUS command, ACCESS(USE) is all that is required. For any other MODIFY command, ACCESS(PRIVILEG) is required to be able to issue if there is no CONSOLE authority for the user. Additional information for CASECAUT