When attempted to access EMCS console on z/OSMF in a ACF2 environment, the following error was observed:
Error detail: Failed to create console due to TSO/E CONSOLE command error.
IKJ55353I USER USER1 DOES NOT HAVE CONSOLE COMMAND AUTHORITY.
Ensure that the following rules are in place:
CONOPER resource for type SAF:
$KEY(CONOPER) TYPE(SAF)
UID(<uidstring>) SERVICE(READ) ALLOW
CONSOLE resource for type SAF:
$KEY(CONSOLE) TYPE(SAF)
UID(<uidstring>) SERVICE(READ) ALLOW
Also make sure that the LID record has the CONSOLE attribute.
If the problem persists, it is recommended to set the TRACE bit on the LID record, reproduce the problem and run the ACFRPTRV report.
Command to set TRACE bit:
TSO ACF
SET LID
CHANGE <userid> TRACE
ACFRPTRV job example:
/REPORT EXEC PGM=ACFRPTRV
//SYSPRINT DD SYSOUT=*
//* THE FOLLOWIND DD SHOULD POINT TO CURRENT SMF
//* THE "D SMF" OPERATOR COMMAND CAN BE USED TO LIST CURRENT SMF
//RECMAN1 DD DISP=SHR,DSN=SYS1.MAN1
//SYSIN DD *
TITLE(ACFRPTRV)
MASK(userid)
/*
After the report is ran, disable the TRACE bit on the LID record by issuing:
TSO ACF
SET LID
CHANGE <userid> NOTRACE
END