DDUTILTY - Auth Relationship Reporting

Products

• Datacom
• DATACOM - AD

Issue/Introduction

New customer investigating security reports.
Customer is looking to get some report similar to DDOL panel T43U

When executing the security report with the DDUTILTY program using the following code from the manual
-RPT START,PERSON,ALL(PROD),SECURITY
-RPT INDEN,PERSON
-RPT RELAT,AUTHORIZATION(,****),TABLE,SYSTEM FORMAT
ERROR: DDFBWT0004 INVALID OVERRIDE
I get the following error when "(,****)" is used. When "(,****)" is removed from the -RPT RELAT statement, the report is generated. I can not find any specific explanation in the 15.0 documents related to "(,****)". Where is this information documented? When I try to substitute other values for TABL or SYSTEM on the -RPT RELAT statement I get errors. When can I find what other values can be used?

Environment

z/os, CA Datacom/DB 14.0 and higher.

Resolution

// the following DDUTILTY is the closest  one from DDOL T43U panel.  
//SYSIN DD *
-USR DATACOM-INSTALL,NEWUSER 
-DEF PATH,SECURITY                                  
-DEF TRACE,PERSON.AUTHORIZATION,PER-ATZ-AUTH        
-END                                                
-RPT START,PERSON,*(PROD),SECURITY                  
-RPT INDEN,PERSON                                   
-RPT RELAT,AUTHORIZATION(PROD,PRIV),TABLE,SYSTEM    
-END                                                
/*                                                  
//

Note: You can replace '*' by a specific userid.
Note: +USR is also acceptable
The report will however display all the table versions (old, PROD and HIST) adding lines in the report.                                                 

Additional Information

Original error:
ERROR: DDFBWT0004 INVALID OVERRIDE
was due to using '****' instead of PRIV in the SYSIN.