Job commands

This table lists the specific authorities required for the Job commands.

Commands identified by (Q) are shipped with public authority *EXCLUDE. Commands shipped with public authority *EXCLUDE shows which IBM-supplied user profiles are authorized to the command. The security officer can grant *USE authority to others.

Command Referenced object Authority needed
For object For library
BCHJOB Job description 9,11 *USE *EXECUTE
Libraries in the library list (system, current, and user)7 *USE  
User profile in job description 10 *USE  
Sort sequence table 7 *USE *EXECUTE
Message queue 10 *USE, *ADD *EXECUTE
Job queue 10,11 *USE *EXECUTE
Output queue 7 *READ *EXECUTE
CHGACGCDE 1      
CHGGRPA 4 Message queue if associating a message queue with a group *OBJOPR *EXECUTE
CHGJOB 1,2,3 New job queue, if changing the job queue10,11 *USE *EXECUTE
New output queue, if changing the output queue7 *READ *EXECUTE
Current output queue, if changing the output queue *READ *EXECUTE
Sort sequence table7 *USE *EXECUTE
CHGPJ User profile for the program start request to specify *PGMSTRRQS *USE *EXECUTE
User profile and job description *USE *EXECUTE
CHGSYSJOB(Q) 13      
CHGUSRTRC14 User trace buffer when CLEAR (*YES) is used.15 *OBJOPR *EXECUTE
User trace buffer when MAXSTG is used15 *CHANGE, *OBJMGT *USE
User trace buffer when TRCFULL is used. 15 *OBJOPR *EXECUTE
DLTUSRTRC User trace buffer 15 *OBJOPR, *OBJEXIST *EXECUTE
DLYJOB 4      
DMPUSRTRC User trace buffer 15 *OBJOPR *EXECUTE
DSCJOB 1      
DSPACTPJ Auxiliary storage pool (ASP) device description *USE  
Program library   *EXECUTE
DSPJOB 1      
DSPJOBTBL      
DSPJOBLOG 1,5 Output file and member exist *OBJOPR, *OBJMGT, *ADD *EXECUTE
Member does not exist *OBJOPR, *OBJMGT, *ADD *EXECUTE, *ADD
Output file does not exist *OBJOPR *EXECUTE, *ADD
ENDGRPJOB      
ENDJOB 1      
ENDJOBABN 1      
ENDLOGSVR6      
ENDPJ 6 Auxiliary storage pool (ASP) device description *USE  
Program library   *EXECUTE
HLDJOB 1      
RLSJOB 1      
RRTJOB      
RTVJOBA      
SBMDBJOB Database file *USE *EXECUTE
Job queue *READ *EXECUTE
SBMDKTJOB Message queue *USE, *ADD *EXECUTE
Job queue and device description *READ *EXECUTE
SBMJOB 2, 12, 17, 18 Job description 9,11 *USE *EXECUTE
Libraries in the library list (system, current, and user)7 *USE  
Message queue10 *USE, *ADD *EXECUTE
User profile 10,11 *USE  
User profile in job description 10 *USE (at level 40)  
Job queue 10,11 *USE *EXECUTE
Output queue 7 *READ *EXECUTE
Sort sequence table 7 *USE *EXECUTE
ASP devices in the initial ASP group *USE  
SBMNETJOB Database file *USE *EXECUTE
STRLOGSVR6      
STRPJ 6 Subsystem description *USE  
Program *USE *EXECUTE
Auxiliary storage pool (ASP) device description *USE  
TFRBCHJOB Job queue *READ *EXECUTE
TFRGRPJOB First group program *USE *EXECUTE
TFRJOB 8 Job queue *USE *EXECUTE
Subsystem description to which the job queue is allocated *USE  
TFRSECJOB      
WRKACTJOB      
WRKARMJOB16      
WRKASPJOB Device description *USE  
WRKJOB 1      
WRKJOBLOG      
WRKSBMJOB      
WRKSBSJOB      
WRKUSRJOB      
1
Any user can run these commands for jobs running under his own user profile. A user with job control (*JOBCTL) special authority can run these commands for any job. If you have *SPLCTL special authority, you do not need any authority to the job queue. However, you need authority to the library that contains the job queue.
2
You must have the authority (specified in your user profile) for the scheduling priority and output priority specified.
3
To change certain job attributes, even in the user’s own job, requires job control (*JOBCTL) special authority. These attributes are RUNPTY, TIMESLICE, PURGE, DFTWAIT, and TSEPOOL.
4
This command only affects the job in which it was specified.
5
To display a job log for a job that has all object (*ALLOBJ) special authority, you must have *ALLOBJ special authority or be authorized to the All Object Job Log function of the IBM i through Application Administration in IBM Navigator for i. The Change Function Usage (CHGFCNUSG) command, with a function ID of QIBM_ACCESS_ALLOBJ_JOBLOG, can also be used to change the list of users that are allowed to display a job log of a job with *ALLOBJ special authority.
6
To use this command, job control *JOBCTL special authority is required.
7
The user profile under which the submitted job runs is checked for authority to the referenced object. The adopted authority of the user submitting or changing the job is not used.
8
If the job being transferred is an interactive job, the following restrictions apply:
  • The job queue where the job is placed must be associated with an active subsystem.
  • The workstation associated with the job must have a corresponding workstation entry in the subsystem description associated with the new subsystem.
  • The workstation associated with the job must not have another job associated with it that has been suspended by means of the Sys Req (System Request) key. The suspended job must be canceled before the Transfer Job command can run.
  • The job must not be a group job.
9
Both the user submitting the job and the user profile under which the job will run are checked for authority to the referenced object.
10
The user submitting the job is checked for authority to the referenced object.
11
The adopted authority of the user issuing the CHGJOB or SBMJOB command is used.
12
You must be authorized to the user profile and the job description; the user profile must also be authorized to the job description.
13
To change certain job attributes, even in the user’s own job, requires job control (*JOBCTL) and all object (*ALLOBJ) special authorities.
14
Any user can run these commands for jobs running under his own user profile. A user with job control (*JOBCTL) special authority can run these commands for any job.
15
A user trace buffer is a user space (*USRSPC) object in library QUSRSYS by the name QPOZnnnnnn, where 'nnnnnn' is the job number of the job using the user trace facility.
16
To work with a specific job or to display details of a specific job, one of the following conditions must apply:
  • The command must be issued from within that job.
  • The issuer of the command must be running under a user profile that is the same as the job user identity of the job.
  • The issuer of the command must be running under a user profile that has job control (*JOBCTL) special authority.
17
You must have the use (*USE) authority to the Changing Accounting Code (CHGACGCDE) command to specify a character-value accounting code on the Accounting code (ACGCDE) parameter.
18
You must have the job control (*JOBCTL) special authority to use the Submitted for (SBMFOR) parameter.