MRI job got error message TSS7251E Access Denied to IBMFAC <HWI.APPLNAME.HWISERV>

Products

• Mainframe Resource Intelligence

Issue/Introduction

MRISCENV job gets the following error messages: 

Function: RACFAUTH Class: FACILITY failed with SAF RC: 0008 RACF RC: 8 Reason: 0 Entity: HWI.TARGET.

TSS7250E 136 J=JOBNAME A=USERID TYPE=IBMFAC RESOURCE=HWI.APPLNAME.HWISERV 
TSS7251E Access Denied to IBMFAC <HWI.APPLNAME.HWISERV>                 

Function: RACFAUTH Class: FACILITY failed with SAF RC: 0008 RACF RC:8 Reason: 0 Entity: HWI.TARGET. 

How these security error messages in Top Secret can be fixed?

Environment

Component : MAINFRAME RESOURCE INTELLIGENCE BASE ASSESSMENT

Cause

 

Resolution

Your External Security Manager (IBM RACF and CA Top Secret) must ensure that the OPERCMDS resource class grants the necessary authority.

The program MRIENV01 attempts to establish a read-only connection to the Hardware Management Console by using the Base Control Program internal interface (BCPii) to retrieve information about your hardware environment.

The MRIENV01 JOB requires access to consult the CPC and image definitions. At minimum, the user needs read access to the following SAF-protected FACILITY classes:

HWI.APPLNAME.HWISERV
HWI.TARGET.netid.nau
HWI.TARGET.netid.nau.imagename

Permissions to issue z/OS system informational commands. The program MRIENV01 establishes an extended MCS console to programmatically issue z/OS system informational commands (INFO). The z/OS operator commands issued by MRIENV01 are reported in the JOBLOG of the MRIENVSC job. Your External Security Manager (IBM RACF and Top Secret) must ensure that the OPERCMDS resource class grants the necessary authority.

Authority for read access for the following commands:
DEVSERV READ (DS)
DS QT
DS QD
DISPLAY (D)
D M
D IQP
D PROD,REG,ALL
D IOS,CONFIG
D IOS,EKM
D IOS,MIDAW
D IOS,HYPERPAV
D IOS,ZHPF
D HS
D ICSF
D SSI,LIST
MODIFY (F)
F HZSPROC,DISPLAY
F HCHECK,DISPLAY

Additional Information