Top Secret TSS7251E Access Denied to IBMFAC <STGADMIN.ADR.RESTORE.TOLERATE.ENQF>

Products

• Top Secret

Issue/Introduction

Restore job (PGM=ADRDSSU) with TSS errors for parms TOL(ENQ) and BYPASSACS
DUMP DS(INCL(TSS.xxx.xxx.xx))     /*SECFILE DSNAME */  -
ODD(TAPE),SHR,TOL(ENQF),COMPRESS,ALLD(*),ALLX 

TSS7251E Access Denied to IBMFAC <STGADMIN.ADR.RESTORE.TOLERATE.ENQF>
TSS7251E Access Denied to IBMFAC <STGADMIN.ADR.RESTORE.BYPASSACS>

Does ACID need to be AUTHORIZED TO USE TOLERATE(ENQF) KEYWORD for the RESTORE?  
Is that keyword required?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

Need to be authorized to 'TOLERATE(ENQF)' keyword in DFSMSdss. 
DFHSMSdss manual TOLERATE(ENQF) - states to continue back even though the  
ENQ on the dataset failed.

Refer to 
https://www.ibm.com/support/knowledgecenter/SSLTBW_2.4.0/com.ibm.zos.v2r4.adru000/r2236.htm for the 'TOLERATE' keyword.

For your knowledge DFSMSdss issues several security checks for the various keywords 
that one can specify. 
One can find a list of them at: 
https://www.ibm.com/support/knowledgecenter/SSLTBW_2.2.0/com.ibm.zos.v2r2.adru000/pudss.htm#pudss