User receives the DBG55096E message while trying to explain an SQL statement for an active thread:
DBG55096E &ZUSER-&ZGROUP, function restricted by security
+The operation was terminated by security checking.
The User profile associated with the User's id in the security file had EXPLAIN=TSO. Recommended changing the setting to EXPLAIN=ALL. After user exited Insight, client would then use the SECURITY command in Insight to do a refresh of security. Next time User invoked Insight, they were able to successfully execute an explain.