DB2 is giving an ACF2 violation trying to refresh WLM and also get message DSNT542I
search cancel

DB2 is giving an ACF2 violation trying to refresh WLM and also get message DSNT542I

book

Article ID: 189973

calendar_today

Updated On:

Products

ACF2 ACF2 - DB2 Option ACF2 - z/OS ACF2 - MISC

Issue/Introduction

Running a refresh of WLM in DB2, the job gets an ACF04056 violation and error message

DSNT542I SQL ID sqlid IS NOT AUTHORIZED TO REFRESH WLM ENVIRONMENT wlm-environment-name

https://www.ibm.com/support/knowledgecenter/en/SSEPEK_12.0.0/msgs/src/tpc/dsnt542i.html

System programmer response

Give sqlid READ access or higher on the appropriate SAF resource profile. That profile resides in SAF resource class DSNR and has the format ssid.WLM_REFRESH.wlm-environment-name.

What rule is needed in ACF2?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

A sample rule could look like this where DSNC is the ssid, using the default TYPE code in the CLASMAP record for class DSNR.
 

$KEY(DSNC) TYPE(SAF)

BATCH.- UID(*) ALLOW

DIST.- UID(*) ALLOW

RRSAF.- UID(   ACFSTCID) ALLOW

WLM_REFRESH.- UID(   ACFSTCID) ALLOW < this is the rule line for the violation