ACF00209 Unable to define a TAMZ for ACF2 class record using "ATTRIBUT" parameter

Products

• ACF2 - z/OS

Issue/Introduction

Trying to use Class "CATAM" typecode "TAM"  to elevate user permission. When issuing "SET CONTROL(TAM)" and trying to define a class record using "ATTRIBUT", the following ACF00209 message is returned.

SET CONTROL(TAM)
INSERT CLASS.SECURITY ATTRIBUT(SECURITY) TIMEBOX(120) DESC(Security Access)

ACF00209 FIELD ATTRIBUT NOT ALLOWED FOR RECORD

Environment

Release : 16.0

Component :   ACF2 for z/OS

Resolution

The ACF00209 FIELD fld NOT ALLOWED FOR RECORD indicates:
Reason: You specified a field (fld) that is not valid with the record.
Action: Verify the syntax and valid fields for this record and retry.

The ATTRIBUT parameter specifies one or more attributes (privileges) in the logonid record to which a user can elevate. When a user with a scope list is elevated to one or more classes that contain an applicable ATTRIBUT, the scope list is used. For example, if USER001 has a scope list and elevates to a CLASS with ATTRIBUT(SECURITY), USER001 is a scoped security officer during the elevation. ATTRIBUT is optional. 

 The ATTRIBUT parameter can only be used when TAMz is installed and the CFH0LINK library is in the linklist then the insertion/creation of the required CONTROL(TAM) records with the ATTRIBUT parameter can occur.

SET CONTROL(TAM)
INSERT CLASS.SECURITY ATTRIBUT(SECURITY) TIMEBOX(120) DESC(Security Access)
SYSA / CLASS.SECURITX LAST CHANGED BY USER002 ON 09/24/25-12:44           
                     ALTUID() ATTRIBUT(SECURITY) DESC(Security Access)    
                     NOREQCREDS NOREQTICKT ROLENAME() SDESK() TIMEBOX(120)