DB2 is giving an ACF2 violation trying to refresh WLM and also get message DSNT542I

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

Running a refresh of WLM in DB2, the job gets an ACF04056 violation and error message

DSNT542I SQL ID sqlid IS NOT AUTHORIZED TO REFRESH WLM ENVIRONMENT wlm-environment-name

https://www.ibm.com/support/knowledgecenter/en/SSEPEK_12.0.0/msgs/src/tpc/dsnt542i.html

System programmer response

Give sqlid READ access or higher on the appropriate SAF resource profile. That profile resides in SAF resource class DSNR and has the format ssid.WLM_REFRESH.wlm-environment-name.

What rule is needed in ACF2?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

A sample rule could look like this where DSNC is the ssid, using the default TYPE code in the CLASMAP record for class DSNR.
 

$KEY(DSNC) TYPE(SAF)

BATCH.- UID(*) ALLOW

DIST.- UID(*) ALLOW

RRSAF.- UID(   ACFSTCID) ALLOW

WLM_REFRESH.- UID(   ACFSTCID) ALLOW < this is the rule line for the violation