When attempting to use the CONSPROF command via TSO receiving a IBM message (IKJ55353I) indicating that we do not have CONSOLE command authority .

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

When attempting to use the CONSPROF command via TSO receiving a IBM message (IKJ55353I) indicating that we do not have CONSOLE command authority. What would be the equivalent CA Top Secret Commands if were to use a RACF type method, togrant the appropriate authority to use the CONSPROF/CONSOLE commands?

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

With Top Secret, the ACID needs to have access to the TSOAUTH(CONSOLE) resource.

TSS ADD(dept) TSOAUTH(CONSOLE)...if not owned already 
TSS PER(acid) TSOAUTH(CONSOLE) 

The user needs at least 1 TSO field on his acid for the TSOAUTH(CONSOLE) authority to be picked up.