IKJ55353I with EMCS CONSOLE WITH z/OSMF ACF2

Products

• ACF2
• ACF2 - MISC
• ACF2 - z/OS

Issue/Introduction

When attempted to access EMCS console on z/OSMF in a ACF2 environment, the following error was observed:

Error detail: Failed to create console due to TSO/E CONSOLE command error.
IKJ55353I USER USER1 DOES NOT HAVE CONSOLE COMMAND AUTHORITY. 

Resolution

Ensure that the following rules are in place:

CONOPER resource for type SAF:

$KEY(CONOPER) TYPE(SAF)  
UID(<uidstring>) SERVICE(READ) ALLOW

CONSOLE resource for type SAF:

$KEY(CONSOLE) TYPE(SAF)
 UID(<uidstring>) SERVICE(READ) ALLOW     

Also make sure that the LID record has the CONSOLE attribute.                    

 

Additional Information

If the problem persists, it is recommended to set the TRACE bit on the LID record, reproduce the problem and run the ACFRPTRV report. 

Command to set TRACE bit:

TSO ACF
SET LID
CHANGE <userid> TRACE

ACFRPTRV job example:

/REPORT  EXEC PGM=ACFRPTRV  
//SYSPRINT DD SYSOUT=*             
//* THE FOLLOWIND DD SHOULD POINT TO  CURRENT SMF              
//* THE "D SMF" OPERATOR COMMAND CAN BE USED TO LIST CURRENT SMF 
//RECMAN1  DD DISP=SHR,DSN=SYS1.MAN1                                   
//SYSIN    DD *                                                  
TITLE(ACFRPTRV)                                                  
MASK(userid)                                       
/* 

 After the report is ran, disable the TRACE bit on the LID record by issuing:

TSO ACF
SET LID
CHANGE <userid> NOTRACE
END