Sysview/DB2 security error DBG043E
search cancel

Sysview/DB2 security error DBG043E

book

Article ID: 73232

calendar_today

Updated On:

Products

SYSVIEW Performance Management Option for DB2 for z/OS

Issue/Introduction

Recently installed a new IQL request to report on IRLM lock contention then scheduled batch jobs to stop and start the new request on a periodic basis.
The first time the batch jobs ran to stop the request, they each received the following error:
DBG0A5I DBG550A5I Usr USERID,Grp GROUPID,Menu BATCH,CA SYSVIEW for DB2 20.0
DBG043E DBG55043E Access refused by Security
In the Sysview/DB2 security file is this definition: (TYPE=USER,USERID,*,DBA), Does "USERID" require SYSADM authority instead of DBA authority to be able to stop and start the report requests? 

Environment

Z/OS DB2

Resolution

For those with SYSADM set they get ALTER=ALL a user with DBA  gets ALTER=USER.

For ALTER=USER
From the manual:
Controls the ability of the user to STOP, FREEZE, RESET, and RESUME the requests that have already been started.
USER Specifies that the user can issue these commands only for requests that they have started.
IRLMCNT4 request which he is trying to stop he didn't start, it was started by the Datacollector.
Thus he is not allowed to do that and gets the warning message.

ALTER=USER