IDMS REST API IDMS0102 BPX.SERVER EDC5139I Operation not permitted

Products

• IDMS
• IDMS - Database

Issue/Introduction

The IDMS REST API starts successfully but trying to access an endpoint returns error IDMS0102 and security errors in the log:                   

org.zowe.commons.zos.security.service.AccessControlError:  Platform access control failed: The calling address space is not permitted to the BPX.SERVER Facility class or the BPX.SERVER Facility class is undefined and caller not a superuser (UID=0
EDC5139I Operation not permitted. (errno2=0x093800D8), stringRet=null, objectRet=null)

Environment

Release: 19.0

Cause

The error indicates the user assigned to the IDMS REST API server is not running with UID=0 or have access to the BPX.SERVER resource in the FACILITY class. 

Resolution

Use the following RACF commands to give the REST API userid access to the BPX.SERVER resource:

PERMIT BPX.SERVER CLASS(FACILITY) ID(rest_api_userid) ACCESS(READ)
SETR RACLIST(FACILITY) REFRESH