ACF2 scoped security administrator receives ACF00112 message

Products

• ACF2
• ACF2 for z/OS
• ACF2 - MISC

Issue/Introduction

When a scoped Security Admin who is using the test logonid tries to create a new logonid, the following error message is received: 

ACF
insert using(newtst) newid name(new id) prefix() dft-pfx(abc) nosuspend password(New_pswd)
ACF00112 SUPER SECURITY PRIVILEGES NEEDED TO CHANGE FIELD PREFIX

Resolution

In reviewing the ACF2 Message manual, shows this reason from ACF00112:

Reason: The field you want to modify (fld) is marked with a RESTRICT flag. Only an unrestricted security administrator is authorized to modify this field. 

 

The ACF2 manual under @CFDE shows this for FLAGS=RESTRICT:

 

RESTRICT—Only unrestricted security administrators can change this field. This means users with the SECURITY privilege and no SCPLIST restrictions specified in their logonid records.

 

The default shipping of the ACFFDR for PREFIX has this:

@CFDE  PREFIX,LIDPFX,CHAR,ALTER=SECURITY,LIST=ALL,    
            FLAGS=RESTRICT,PRTN=9,RRTN=1,GROUP=11  

 

If the scoped Security Admin needs to change that field, then FLAGS=RESTRICT must be removed from the ACFFDR using the UM99901 usermod.

Additional Information