IKJ55305I With CONSOLE Command In TSO And Top Secret

Products

• Top Secret

Issue/Introduction

A user is trying to issue the CONSOLE command from TSO. This results in:

IKJ55305I THE CONSOLE COMMAND HAS TERMINATED. + USER user_id DOES NOT HAVE CONSOLE COMMAND AUTHORITY

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

2 things are needed:

1) TSOAUTH(CONSOLE) must be added to a department in Top Secret and then permitted to the user. For example:

TSS ADD(dept) TSOAUTH(CONSOLE)
TSS PER(acid) TSOAUTH(CONSOLE)

Where
'dept' is the department that will own the resource
'acid' is the user's ACID, a profile attached to the user, or the ALL record if you want to allow everyone access.

2) The user must have at least 1 TSO field (ie TSOLPROC) on the ACID so that the TSO information for that user is picked up from Top Secret and not SYS1.UADS. To determine if the ACID has any TSO fields on it, issue TSS LIST(acid) DATA(TSO).