Alternate ID RACF not being used as expected
search cancel

Alternate ID RACF not being used as expected

book

Article ID: 249307

calendar_today

Updated On:

Products

Endevor

Issue/Introduction

Running Endevor processor to handle AION.  The processor deletes files with IDCAMS using the Alternate id access but then fails to define a new dataset required failing with a RACF error.                      

ICH408I USER(<userid> ) GROUP(<groupid>) NAME(<user name>)
  <dataset name> CL(DATASET ) VOL(*BLANK)
  DEFINE - INSUFFICIENT AUTHORITY

Is Endevor working correctly using my USERID  instead of the Alternate ID which is expected? 

 

Environment

Release : ALL

 

Resolution

The allocation of the dataset is failing and it is being created in an IEBGENER step in the processor. The message states that the user does not have DEFINE Authority. 

ICH408I USER(<userid>) GROUP(<group name>) NAME(<user name>)
  <dataset name> CL(DATASET ) VOL(*BLANK)
  DEFINE - INSUFFICIENT AUTHORITY

The ALTID is not swapped to on the creation or deletion of a dataset or PDS in a processor.  The userid of the USER that submitted the job must have the authority to create(define) or delete the data set in error. 

Below you will find from the documentation the other items/actions that the ALTID does not get swapped for: 

https://api-broadcom-ca.wolkenservicedesk.com/attachment/get_attachment_content?uniqueFileId=2Fh0YRMidr4OFLg5ipDaOw==