TSS7251E Access Denied to OPERCMDS <MVS.MCSOPER.userid> With Top Secret And MVS Display Commands

Products

• Top Secret

Issue/Introduction

When issuing MVS display commands from a batch job, the following error occurs:

TSS7251E Access Denied to OPERCMDS <MVS.MCSOPER.xxxx>

Resolution

You will need to permit the resource to the acid(s):

TSS PERMIT(acid) OPERCMDS(MVS.MCSOPER.xxxx)

For ULOG, the only function of the OPERCMDS(MVS.MCSOPER.userid) security check out of SDSF is to decide whether or not to pass back the command responses to the user. The authorization to actually execute the commands is checked by other OPERCMDS resources (i.e. MVS.REPLY). 

The MVS.MCSOPER.userid security check is done in order to activate the MCS console from SDSF.  If this check fails then the only impact is on the ULOG function of SDSF which is to display the responses to all commands entered under the session.  This function will not be available without proper auth to the MCSOPER check. The commands themselves are checked for authorization as well via other checks as mentioned above.