*IOSYSCFG special authority

System configuration (*IOSYSCFG) special authority gives the user the ability to change how the system is configured. Users with this special authority can add or remove communications configuration information, work with TCP/IP servers, and configure the internet connection server (ICS). Most commands for configuring communications require *IOSYSCFG special authority.

Recommendations for special authorities: Giving special authorities to users represents a security exposure. For each user, carefully evaluate the need for any special authorities. Keep track of which users have special authorities and periodically review their requirement for the authority.

In addition, you should control the following situations for user profiles and programs:
  • Whether user profiles with special authorities can be used to submit jobs
  • Whether programs created by these users can run using the authority of the program owner
Programs adopt the *ALLOBJ special authority of the owner if:
  • The programs are created by users who have *ALLOBJ special authority
  • The user specifies USRPRF(*OWNER) parameter on the command that creates the program