z/OSMF signon locked

Products

• Top Secret

Issue/Introduction

z/OSMF signon receives:

"To logon to z/OSMF, enter a valid user ID and password. You account might be locked after too many log-in attempts:

Environment

Release : 16.0

Component :

Resolution

User receiving the following violation:

TSS7250E 136 J=IZUSVR1 A=acid TYPE=APPL RESOURCE=IZUDFLT    

To authorize user:

TSS PER(acid) APPL(IZUDFLT)

As part of the z/OSMF install process, Top Secret PROFILEs were created with the proper PERMITs to authorize use of z/OSMF. 

Please see the section "Configure z/OS Management Facility for Top Secret"

All user's using z/OSMF must have those PROFILEs in order to signon and use z/OSMF.

Please contact your security administrative staff to give you the appropriate PROFILEs and GROUPs

TSS ADD(acid) GROUP(IZUADMGP)
TSS ADD(acid) GROUP(IZUUSRGP)
TSS ADD(acid) GROUP(IZUSECGP)

TSS ADD(acid) PROFilE(IZUADMIN)
TSS ADD(acid) PROFilE(IZUUSER)
TSS ADD(acid) PROFilE(IZUSECAD)

The above commands assume the example PROFILE and GROUP names were used.

If different names were used, please use those names.