Upgraded to the latest release of Sailpoint which requires CASECAUT(TSSCMD.ADMIN.MODIFY) after Top Secret APARS SO12760 and SO13014.
What authority does CASECAUT(TSSCMD.ADMIN.MODIFY) grant a user?
Release : 16.0
Component : CA Top Secret for z/OS
Giving a user CASECAUT(TSSCMD.ADMIN.MODIFY) gives the user the ability to issue TSS MODIFY commands which includes issuing them on the console.
TSS MODIFY allows you to change and display Top Secret security setting temporarily and stopping/starting Top Secret.
The PTFs fix problems with the security check not occurring at all which allowed users without the authority to issue MODIFY commands.