Recently installed a new IQL request to report on IRLM lock contention then scheduled batch jobs to stop and start the new request on a periodic basis.
The first time the batch jobs ran to stop the request, they each received the following error:
DBG0A5I DBG550A5I Usr USERID,Grp GROUPID,Menu BATCH,CA SYSVIEW for DB2 20.0
DBG043E DBG55043E Access refused by Security
In the Sysview/DB2 security file is this definition: (TYPE=USER,USERID,*,DBA), Does "USERID" require SYSADM authority instead of DBA authority to be able to stop and start the report requests?
For those with SYSADM set they get ALTER=ALL a user with DBA gets ALTER=USER.
From the manual:
Controls the ability of the user to STOP, FREEZE, RESET, and RESUME the requests that have already been started.
USER Specifies that the user can issue these commands only for requests that they have started.
IRLMCNT4 request which he is trying to stop he didn't start, it was started by the Datacollector.
Thus he is not allowed to do that and gets the warning message.