Need help determining proper authority for a started task ID

Products

• Top Secret
• Top Secret - LDAP
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

REXX executing the MVS command /D XCF,STR,STRNAME= ...

Receives the error message:

IKJ55353I THE CONSPROF COMMAND HAS TERMINATED.+               
IKJ55353I USER DBMSRLE DOES NOT HAVE CONSOLE COMMAND AUTHORITY.

 

 

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

TSS PERMIT(acid) TSOAUTH(CONSOLE)

Note:

The acid needs at least one TSO segment like TSOLPROC to be added to the user for the PERMIT for TSOAUTH(CONSOLE) to be checked by TSO for the console authorization.

 

If its not there, TSO will look to UADS for the authorization and not Top Secret. If you do a find in 'TSOAUTH' in the SECTRACE, notice that it is not found because TSO is calling UADS to see if the user is authorized for the console and not Top Secret.