TCP/IP commands

This table lists the specific authorities required for the TCP/IP commands.

Commands identified by (Q) are shipped with public authority *EXCLUDE. Commands shipped with public authority *EXCLUDE shows which IBM-supplied user profiles are authorized to the command. The security officer can grant *USE authority to others.

Command	Referenced object	Authority needed
Command	Referenced object	For object	For library
ADDTCPSVR¹	Program to call	*EXECUTE	*EXECUTE
CHGTCPSVR¹	Program to call	*EXECUTE	*EXECUTE
CPYTCPHT ⁶	File objects
CVTTCPCL (Q)	File objects	*USE	*EXECUTE
ENDTCPPTP	Line description⁴	*USE	*EXECUTE
	Controller description⁴	*USE	*EXECUTE
	Device description⁴	*USE	*EXECUTE
	File objects	*USE	*EXECUTE
ENDTCPSRV (Q)	File objects	*USE	*EXECUTE
FTP	File objects	*USE	*EXECUTE
FTP	Table objects	*USE	*EXECUTE
LPR ²	Workstation customizing object	*USE	*EXECUTE
RTVTCPINF⁷ (Q)	Specified library	READ, ADD, *EXECUTE
SETVTTBL	Table objects	*USE	*EXECUTE
SNDTCPSPLF ²	Workstation customizing object	*USE	*EXECUTE
STRTCPFTP	Table objects	*USE	*EXECUTE
STRTCPFTP	File objects	*USE	*EXECUTE
STRTCPPTP	Line description⁴	*USE	*EXECUTE
	Controller description⁴	*USE	*EXECUTE
	Device description⁴	*USE	*EXECUTE
	File Objects	*USE	*EXECUTE
STRTCPSVR (Q)	Table objects	*USE	*EXECUTE
STRTCPSVR (Q)	File objects	*USE	*EXECUTE
STRTCPTELN	Table objects	*USE	*EXECUTE
	File objects	*USE	*EXECUTE
	Virtual workstation device⁵	*USE	*EXECUTE
TELNET	Table objects	*USE	*EXECUTE
	File objects	*USE	*EXECUTE
	Virtual workstation device⁵	*USE	*EXECUTE
UPDTCPINF⁸ (Q)	Specified library	READ, ADD, *EXECUTE
These commands do not require any object authorities:
ADDCOMSNMP ¹ ADDNETTBLE ¹ ADDOSPFARA¹ ADDOSPFLNK¹ ADDOSPFIFC¹ ADDOSPFRNG¹ ADDPCLTBLE ¹ ADDRIPACP¹ ADDRIPFLT¹ ADDRIPIFC¹ ADDRIPIGN¹ ADDSRVTBLE ¹ ADDTCPHTE ¹ ADDTCPIFC ¹ ADDTCPPORT ¹ ADDTCPRSI ¹ ADDTCPRTE ¹ ADDUSRSMTP⁹ ADDUSRSNMP¹ CFGTCP CFGTCPAPP CFGTCPFTP ¹ CFGTCPLPD ¹	CFGRTG CFGTCPSMTP CFGTCPSNMP CFGTCPTELN CHGCOMSNMP ¹ CHGDHCPSVR¹ CHGFTPA ¹ CHGLPDA ¹ CHGOSPFA¹ CHGOSPFARA¹ CHGOSPFIFC¹ CHGOSPFLNK¹ CHGOSPFRNG¹ CHGRIPA¹ CHGRIPFLT¹ CHGRIPIFC¹ CHGSMTPA ¹ CHGSNMPA ¹ CHGTCPA ¹ CHGTCPHTE¹ CHGTCPIFC¹ CHGTCPRTE ¹ CHGTELNA ¹ CHGUSRSMTP⁹ CHGUSRSNMP¹	CHGVTMAP CPYVPNCFGF¹ DSPVTMAP ENDTCP (Q) ENDVPNCNN¹ ENDTCPCNN ENDTCPIFC (Q) LODIPFTR¹ MGRTCPHT ¹ NETSTAT PING RMVCOMSNMP ¹ RMVNETTBLE ¹ RMVOSPFARA¹ RMVOSPFIFC¹ RMVOSPFLNK¹ RMVOSPFRNG¹ RMVPCLTBLE ¹ RMVRIPACP¹ RMVRIPFLT¹ RMVRIPIFC¹ RMVRIPIGN¹ RMVSRVTBLE ¹ RMVTCPHTE¹ RMVTCPIFC¹ RMVTCPPORT ¹	RMVTCPRSI ¹ RMVTCPRTE ¹ RMVTCPSVR ¹ RMVUSRSMTP⁹ RMVUSRSNMP¹ RNMTCPHTE ¹ SETVTMAP SNDSMTPEMM¹⁰ STRIMPSMTP STRTCP (Q) STRTCPIFC (Q) STRVPNCNN¹ VFYTCPCNN WRKNAMSMTP ³ WRKNETTBLE¹ WRKPCLTBLE¹ WRKSMTPEMM¹ WRKSMTPUSR⁹ WRKSRVTBLE¹ WRKTCPSTS
¹ You must have IOSYSCFG special authority to use this command. ² The SNDTCPSPLF command and the LPR command use the same combinations of referenced object authorities as the SNDNETSPLF command. ³ You must have SECADM special authority to change the system alias table or another user profile's alias table. ⁴ If you have JOBCTL special authority, you do not need the specified authority to the object. ⁵ If you have JOBCTL special authority, you do not need the specified authority to the object on the remote system. 6 For the required authorities, refer to the description of the Display (DSP) or other operation using output file (OUTPUT(OUTFILE)) section in the General rules for object authorities on commands topic. 7 You must have SAVSYS special authority to use this command. 8 You must have ALLOBJ, SECADM, and SAVSYS special authorities to use this command. 9 You must have SECADM special authority to add, change, remove, or view entries for profiles different than the current user. 10 The current user profile must be enrolled in the e-mail directory that is set by the CHGSMTPA command and the DIRTYPE keyword. For a setting of SDD for the DIRTYPE keyword the current user profile must be enrolled in the System Distribution Directory (SDD) and must also have an smtp name defined via the WRKNAMSMTP command. For a setting of SMTP or *SMTPMSF the current user profile must be enrolled via ADDUSRSMTP.