> -----Original Message----- > From: IBM Mainframe Discussion List > [mailto:[EMAIL PROTECTED] On Behalf Of Brent Victor > Sent: Monday, May 23, 2005 12:30 AM > To: [email protected] > Subject: RACF - SDSF and SUBMIT Commands > > > After installing z/OS 1.4 Server Pac, I receive the following > when trying to use SDSF: > ISF024I USER NOT AUTHORIZED TO SDSF, NO GROUP ASSIGNMENT > > and following when I try to use the SUBMIT command: > IKJ56251I USER NOT AUTHORIZED FOR SUBMIT+ > IKJ56251I YOUR TSO ADMINISTRATOR MUST AUTHORIZE USE OF THIS COMMAND > > The UserID "IBMUSER" works fine, but all other TSO ID's get the above > messages. > I haven't installed z/OS for about three years and my knowledge of > RACF never was good. > What I need is for all TSO users to be authorized to do about > anything they want. This system is to be used for testing only. > I remember having this problem years ago, but don't remember > what resolved it. > > What do I need to do to authorize these users? > Thanks in advance. >
What you need in order to do a SUBMIT is at least READ access to the JCL profile in the TSOAUTH class. Example: "PE JCL CLASS(TSOAUTH) ID(...) ACCESS(READ)". Don't use the quotes, of course. Also replace the ... with either (1) a RACF GROUP of which the TSO user is a member (preferrable his default group) or (2) the individual RACF userid. I never do option (2), personally. This may also be why you do not have SDSF authority. In my ISFPRM00 member, in the GROUP section, I have TSOAUTH(JCL). This means that a person is NOT a member of that group unless he has the above mentioned JCL authority. Try the PERMIT above to see if you get going. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
