search cancel

Top Secret Access Required To Execute The Cleanup AT6DBR Batch Job

book

Article ID: 215360

calendar_today

Updated On:

Products

Cleanup Top Secret

Issue/Introduction

Which security privileges are required to execute the Cleanup report job AT6DBR?

Environment

Release : 12.1

Component : CA Cleanup for Top Secret

Resolution

When running the AT6DBR report with:

//SYSIN     DD *         * DELETE THE CMDS AND BACKOUT FILES
 DELETE hlq.CMDSR   
 DELETE hlq.BACKOUTR
 SET MAXCC = 0                      

//DBASE     DD DISP=SHR,DSN=hlq.DB
//INCLUDE   DD *         * REPORT ON ALL ACIDS IN THE CLEANUP DB
*ALL*

//* THIS SECTION CREATE THE CMDS AND BACKOUT FILES
//CFILE     DD DISP=SHR,DSN=hlq.TSSCFILE.OUTPUT          
//*                                                            
//CMDS      DD DSN=hlq.CMDSR,                  
//             DISP=(,CATLG),SPACE=(CYL,(55,5),RLSE),UNIT=3390,
//             DCB=(RECFM=FB,LRECL=80,BLKSIZE=0),VOL=SER=vvvvvv
//*                                                            
//BACKOUT   DD DSN=hlq.BACKOUTR,               
//             DISP=(,CATLG),SPACE=(CYL,(55,5),RLSE),UNIT=3390,
//             DCB=(RECFM=FB,LRECL=80,BLKSIZE=0),VOL=SER=vvvvvv

The acid needs:

SCRATCH access to dataset hlq.CMDSR   
SCRATCH access to dataset hlq.BACKOUTR
CREATE access to dataset hlq.CMDSR    
CREATE access to dataset hlq.BACKOUTR
READ access to the CLEANUP database hlq.DB

The acid does not need any administrative authorities or scope. 

NOTE: The ZCA did not run the TSSCFILE job to create the hlq.TSSCFILE.OUTPUT file. The authority and scope required for TSSCFILE/TSSCFBK to create the hlq.TSSCFILE.OUTPUT file is documented here:

TSSCFILE/TSSCFBK Overview, Authority/Scope, and JCL Requirements