External security messages report plan RAPBxxxx lacks authorization from the Xmanager started task.

Products

• Recovery Analyzer for DB2 for z/OS
• Database Management for DB2 for z/OS - Recovery Suite
• Database Management for DB2 for z/OS - Administration Suite
• Database Management for DB2 for z/OS - Performance Suite
• Database Management for DB2 for z/OS - SQL Performance Suite
• Database Management for DB2 for z/OS - Utilities Suite
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS

Issue/Introduction

Encountering external security messages that report plan RAPBxxxx lacks authorization from the Xmanager started task.

Examples:
ACF04056 ACCESS TO RESOURCE ssid RAPBxxxx TYPE DPLN BY PTXMAN
TSS7251E Access Denied to DB2PLAN <RAPBxxxx>

Cause

The messages are a result of Recovery Analyzer for Db2 for z/OS (PRA) health check.
Example: DB2_PRA_#LOAD_LAST_RUN@xmanxxxx

Resolution

To disable the PRA health check for DB2_PRA_#LOAD_LAST_RUN in the future,
add the following to SYS1.PARMLIB member HZSPRMxx:

ADDREPLACE POLICY
DELETE CHECK(CA_DB2,DB2_PRA_#LOAD_LAST_RUN*)
DATE(&YR4&LMON&LDAY)
REASON('DO NOT RUN PRA#LOAD DB2 TOOL HEALTH CHECK')

Alternatively using this statement will disable all specific product health checks specific to PRA:

ADDREPLACE POLICY
DELETE CHECK(CA_DB2,DB2_PRA_*)
DATE(&YR4&LMON&LDAY)
REASON('DO NOT RUN PRA#LOAD DB2 TOOL HEALTH CHECK')

Additional Information

For additional details see the products manuals for a list of health checks and the following Knowledge Article:

How can Db2 tools for z/OS Health Check routines be prevented from executing?