When attempting to use the CONSPROF command via TSO receiving a IBM message (IKJ55353I) indicating that we do not have CONSOLE command authority .

Products

• CA Top Secret
• CA Top Secret - LDAP

Issue/Introduction

Question:

 

When attempting to use the CONSPROF command via TSO receiving a IBM message (IKJ55353I) indicating that we do not have CONSOLE command authority .

What would be the equivalent CA Top Secret Commands if were to use a RACF type method, togrant the appropriate authority to use the CONSPROF/CONSOLE commands?

 

Answer:

 

With Top Secret the ACID need to have access to the TSOAUTH(CONSOLE) resource.

 

TSS ADD(dept) TSOAUTH(CONSOLE)...if not owned already 

TSS PER(acid) TSOAUTH(CONSOLE) 

The user needs at least 1 TSO field on his acid for the 

TSOAUTH(CONSOLE) authority to be picked up. 

 

Additional Information:

 

 

CA Top Secret for z/OS r15.0 User's Guide

https://support.ca.com/cadocs/0/CA%20Top%20Secret%20%20Security%20for%20z%20OS%20r15-ENU/Bookshelf_Files/HTML/TSS_User_zOS_ENU/index.htm

 

 

 

 

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component: