We do not use RACF as our ESM, but year ago, I recall having to give OPER authority under the TSO ACCOUNT command in order for users to issue the TSO CONSOLE command.
Perhaps one of your users has this and one does NOT. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Burrell, Todd Sent: Wednesday, August 16, 2017 12:09 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: CONSOLE command failing - what else to check? Neither have an OPERPARM segment. -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mark Jacobs - Listserv Sent: Wednesday, August 16, 2017 12:03 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: CONSOLE command failing - what else to check? Does the falling user have an OPERPARM segment in their RACF profile? > Todd Burrell <mailto:todd_burr...@csx.com> August 16, 2017 at 11:52 AM > I have 2 users and one can successfully execute the CONSOLE command > while running it in a started task and in batch, but the other user > cannot. From what I can tell they are both connected to the same RACF > groups and both should have all of the necessary access required to > run the CONSOLE command - but one fails with a RC 36 which indicates > they are not authorized? Also, there are no RACF error messages for > the failing user - and nothing when I ran RACFICE this morning in the > violation report? > > I seem to remember there is something else that might need to get > changed in TSO? Does anyone have anything else I can check? > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > Please be alert for any emails that may ask you for login information > or directs you to login via a link. If you believe this message is a > phish or aren't sure whether this message is trustworthy, please send > the original message as an attachment to 'phish...@timeinc.com'. > -- Mark Jacobs Time Customer Service Global Technology Services The standard you walk past is the standard you accept. Lt. Gen. David Morrison ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN This email transmission and any accompanying attachments may contain CSX privileged and confidential information intended only for the use of the intended addressee. Any dissemination, distribution, copying or action taken in reliance on the contents of this email by anyone other than the intended recipient is strictly prohibited. If you have received this email in error please immediately delete it and notify sender at the above CSX email address. Sender and CSX accept no liability for any damage caused directly or indirectly by receipt of this email. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN