Within Sysview for Db2 for z/OS (IDB2), user receives the DBG55096E message while trying to explain an SQL statement for an active thread:
DBG55096E &ZUSER-&ZGROUP, function restricted by security
+The operation was terminated by security checking.
The User profile associated with the User's ID in the security file had EXPLAIN=TSO. Recommended changing the setting to EXPLAIN=ALL.
After user exited IDB2, client would then use the SECURITY command in IDB2 to do a refresh of security.
Next time user invoked IDB2, they were able to successfully execute an explain.