search cancel

MRI: TSS7250E TYPE=IBMFAC RESOURCE=HWI.APPLNAME.HWISERV

book

Article ID: 189152

calendar_today

Updated On:

Products

Mainframe Resource Intelligence

Issue/Introduction

MRISCENV job gets the following error messages: 

Function: RACFAUTH Class: FACILITY failed with SAF RC: 0008 RACF RC: 8 Reason: 0 Entity: HWI.TARGET.

TSS7250E 136 J=BAI$MUF1 A=USERID TYPE=IBMFAC RESOURCE=HWI.APPLNAME.HWISERV 
TSS7251E Access Denied to IBMFAC <HWI.APPLNAME.HWISERV>                 

Function: RACFAUTH Class: FACILITY failed with SAF RC: 0008 RACF RC:8 Reason: 0 Entity: HWI.TARGET. 

Cause

 Your External Security Manager (IBM RACF and CA Top Secret) must ensure that the OPERCMDS resource class grants the necessary authority.

Environment

Component : CA MAINFRAME RESOURCE INTELLIGENCE BASE ASSESSMENT

Resolution

The program MRIENV01 attempts to establish a read-only connection to the Hardware Management Console by using the Base Control Program internal interface (BCPii) to retrieve information about your hardware environment.

The MRIENV01 JOB requires access to consult the CPC and image definitions. At minimum, the user needs read access to the following SAF-protected FACILITY classes:

HWI.APPLNAME.HWISERV

HWI.TARGET.netid.nau
HWI.TARGET.netid.nau.imagename

Permissions to issue z/OS system informational commands. The program MRIENV01 establishes an extended MCS console to programmatically issue z/OS system informational commands (INFO). The z/OS operator commands issued by MRIENV01 are reported in the JOBLOG of the MRIENVSC job. Your External Security Manager (IBM RACF and CA Top Secret) must ensure that the OPERCMDS resource class grants the necessary authority.

Authority for read access for the following commands:
DEVSERV READ (DS)
DS QT
DS QD
DISPLAY (D)
D M
D IQP
D PROD,REG,ALL
D IOS,CONFIG
D IOS,EKM
D IOS,MIDAW
D IOS,HYPERPAV
D IOS,ZHPF
D HS
D ICSF
D SSI,LIST
MODIFY (F)
F HZSPROC,DISPLAY
F HCHECK,DISPLAY


Additional Information


Security Requirements
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/intelligent-operations/ca-mainframe-resource-intelligence/1-0-1/getting-started/install-and-use-the-mainframe-resource-intelligence-toolkit-version-1-1/run-an-environmental-scan-to-collect-hardware-and-software-data.html