GETALIAS Script and ICH408I RACF Errors
search cancel

GETALIAS Script and ICH408I RACF Errors

book

Article ID: 235697

calendar_today

Updated On:

Products

Vantage Storage Resource Manager

Issue/Introduction

The GETALIAS script is looking at volumes SMFxxx, and at catalogs ICF.*.SMFCAT.  Both of these are excluded in the INCLEXCL member.

 START-EXCLUDE-VOL    Online Volumes
  EXCL=SMF/                         

START-DSNCTLG-CAT    Catalogs to Audit
 INCL=ALL                             
 EXCL=ICF.ATC.SMFCAT    

This is generating hundreds of RACF errors, such as:

ICH408I USER(SAMS    ) GROUP(XYZSAMS ) NAME(SAMS STC            )
  SMFCATresource-name CL(DATASET ) VOL(SMFXXX)
  INSUFFICIENT ACCESS AUTHORITY
  FROM ICF.*.profile-name (G)
  ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )
ICH408I USER(SAMS    ) GROUP(XYZSAMS ) NAME(SAMS STC            )
  SMFDUMP.resource-name CL(DATASET ) VOL(SMFZZZ)
  INSUFFICIENT ACCESS AUTHORITY
  FROM SMFDUMP.** (G)
  ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )

Environment

Vantage

Cause

The SAMS STC does not have READ authority for the target data sets for the aliases. 

Resolution

The Vantage GETALIAS script does not make use of the INCLEXCL feature to limit what records (i.e., aliases) it would process.  The direct way to avoid the RACF ICH408I messages is to give the Vantage started task (i.e., userid 'SAMS') READ access to the target data sets for the aliases.  A product enhancement would be needed to provide support for this type of processing.