AUDIT_JOURNAL_DS (Service Tools User ID and Attribute Changes) table function

The AUDIT_JOURNAL_DS table function returns rows from the audit journal that contain information from the DS (Service Tools User ID and Attribute Changes) journal entries.

Every audit journal table function shares a common authorization requirement and a common set of parameters. These are described in AUDIT JOURNAL table function common information.

The result of the function is a table containing rows with the format shown in the following table. All the columns are nullable.

Table 1. AUDIT_JOURNAL_DS table function
Column Name Data Type Description
The first columns returned by this table function are from the common audit journal entry header. See Common columns returned from the audit journal entry header for the column definitions. After the common columns are the following columns that describe the entry specific data for the DS audit journal entry.
ENTRY_TYPE CHAR(1) The type of entry.
A
Reset of a service tools user ID password using the Change IBM® Service Tools Pwd (CHGDSTPWD) command.
C
Change to a service tools user ID using the Change Service Tools User ID (QSYCHGDS) API.
D
Delete of a service tools user ID using the Delete Service Tools User ID (DLTSSTUSR) command.
H
Change to a service tools user ID using the Change Service Tools User ID (CHGSSTUSR) command.
Start of changeKEnd of change
Start of changeChange to a service tools user ID using the Change SST TOTP Key (CHGSSTKEY) command.End of change
P
Change to a service tools user ID password using the Change Service Tools User ID (QSYCHGDS) API.
R
Create of a service tools user ID using the Create Service Tools User ID (CRTSSTUSR) command.
S
Change to the service tools security attributes using the Change SST Security Attributes (CHGSSTSECA) command.
ENTRY_TYPE_DETAIL VARCHAR(200) Descriptive text that corresponds to the entry type.
SST_USERID VARCHAR(10) The name of the service tools user ID that requested the action.

Contains the null value when ENTRY_TYPE is A.

SST_USERID_MODIFIED VARCHAR(10) The service tools user ID being created, changed, renamed, or deleted. When ENTRY_TYPE is C or P, it can contain one of the following special values.
*SECURITY
*SERVICE

Contains the null value when ENTRY_TYPE is not C, D, H, P, or R.

SST_USERID_NEW VARCHAR(10) The new service tools user ID when a user ID is renamed.

Contains the null value when ENTRY_TYPE is not C.

SET_PASSWORD_EXPIRED VARCHAR(3) Set password to expired.
NO
Password is not set to expired
YES
Password is set to expired

Contains the null value when ENTRY_TYPE is not H or R.

USERID_STATUS VARCHAR(9) Status of the user ID.
*DISABLED
*ENABLED

Contains the null value when ENTRY_TYPE is not H or R, or if ENTRY_TYPE is H but no status is available.

PREV_USERID_STATUS VARCHAR(9) Previous status of the user ID.
*DISABLED
*ENABLED

Contains the null value when ENTRY_TYPE is not H or R, or if ENTRY_TYPE is H but no status is available.

LINKED_PROFILE VARCHAR(10) The user profile that is linked to the service tools user ID.

Contains the null value when ENTRY_TYPE is not H or R, or there is no linked user profile.

PREV_LINKED_PROFILE VARCHAR(10) The user profile that was previously linked to the service tools user ID.

Contains the null value when ENTRY_TYPE is not H, or no user profile was previously linked.

Start of changeAUTHENTICATION_METHODEnd of change Start of changeVARCHAR(10)End of change Start of changeService tools user ID authentication method.
*NONE
No additional authentication method used for the SST user.
*TOTP
A time-based one-time password (TOTP) is required when authenticating using the SST user.

Contains the null value when this value did not change or when ENTRY_TYPE is not A or H.

End of change
Start of changePREV_AUTHENTICATION_METHODEnd of change Start of changeVARCHAR(10)End of change Start of changePrevious service tools user ID authentication method.
*NONE
No additional authentication method used for the SST user.
*TOTP
A time-based one-time password (TOTP) is required when authenticating using the SST user.

Contains the null value when this value did not change or when ENTRY_TYPE is not A or H.

End of change
Start of changeTOTP_KEY_EXISTSEnd of change Start of changeVARCHAR(3)End of change Start of changeWhether the time-based one-time password (TOTP) key exists for the Service Tools User ID Requesting Profile.
NO
TOTP key is *NONE
YES
TOTP key exists

Contains the null value when this value did not change or when ENTRY_TYPE is not A or K.

End of change
Start of changePREV_TOTP_KEY_EXISTSEnd of change Start of changeVARCHAR(3)End of change Start of changePrevious time-based one-time password (TOTP) key exists value.
NO
TOTP key is *NONE
YES
TOTP key exists

Contains the null value when this value did not change or when ENTRY_TYPE is not A or K.

End of change
MAXIMUM_SIGNON_ATTEMPTS INTEGER The maximum number of sign-on attempts an SST user is allowed.
2-15

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

ALLOW_PASSWORD_CHANGE VARCHAR(3) Allow an SST user with a default and expired password to change their own password.
NO
Do not allow change
YES
Allow change

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

ALLOW_SECURITY_SYSVAL_CHANGE VARCHAR(3) Allow changes to security related system values.
NO
Do not allow changes
YES
Allow changes

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

ALLOW_DIGITAL_CERTIFICATE_ADD VARCHAR(3) Allow digital certificates to be added to a certificate store.
NO
Do not allow add
YES
Allow add

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

ALLOW_PASSWORD_EXIT_
PROGRAM_ADD_REMOVE
VARCHAR(3) Allow exit programs to be added to and removed from the password exit programs.
NO
Do not allow add and remove
YES
Allow add and remove

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

Start of change
ALLOW_CHANGE_ADDITIONAL_
SIGNON_FACTOR
End of change
Start of changeVARCHAR(3)End of change Start of changeAllow change of additional sign-on factor security attribute using the Change Security Attributes (CHGSECA) command.
NO
Do not allow change
YES
Allow change

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

End of change
Start of changeADDITIONAL_SIGNON_FACTOREnd of change Start of changeVARCHAR(9)End of change Start of changeAdditional sign-on factor SST attribute.
*DISABLED
Additional sign-on factor for SST sign-on disabled.
*ENABLED
Additional sign-on factor for SST sign-on enabled.

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

End of change
PREV_MAXIMUM_SIGNON_ATTEMPTS INTEGER The previous maximum sign-on attempts allowed.
2-15

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_ALLOW_PASSWORD_CHANGE VARCHAR(3) Previous value of allow SST Password Change.
NO
Do not allow change
YES
Allow change

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_ALLOW_SECURITY_SYSVAL_CHANGE VARCHAR(3) Previous value of allow changes to security related system values.
NO
Do not allow changes
YES
Allow changes

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

PREV_ALLOW_DIGITAL_CERTIFICATE_ADD VARCHAR(3) Previous value of allow add of digital certificates.
NO
Do not allow add
YES
Allow add

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

PREV_ALLOW_PASSWORD_EXIT_
PROGRAM_ADD_REMOVE
VARCHAR(3) Previous value of allow add and remove of password exit programs.
NO
Do not allow add and remove
YES
Allow add and remove

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

Start of change
PREV_ALLOW_CHANGE_ADDITIONAL_
SIGNON_FACTOR
End of change
Start of changeVARCHAR(3)End of change Start of changePrevious value of allow change of additional sign-on factor security attribute.
NO
Do not allow change
YES
Allow change

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

End of change
Start of changePREV_ADDITIONAL_SIGNON_FACTOREnd of change Start of changeVARCHAR(9)End of change Start of changePrevious value of additional sign-on factor SST attribute.
*DISABLED
Additional sign-on factor for SST sign-on disabled.
*ENABLED
Additional sign-on factor for SST sign-on enabled.

Contains the null value when this security attribute did not change or when ENTRY_TYPE is not S.

End of change
PASSWORD_LEVEL INTEGER System Service Tools (SST) password level. The service tools password rules are similar to the values that are specified in the Password Rules (QPWDRULES) system value.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_EXPIRATION_
INTERVAL
VARCHAR(7) Service tools user ID password expiration interval. The number of days between the date the password is changed and the date when the password expires.
*NOMAX
The password does not expire.
*SSTATR
The password expiration interval defined for the SST security attribute is used.
1-366

Contains the null value when ENTRY_TYPE is not H or S, or if the password expiration interval is not available.

PASSWORD_DUPLICATION INTEGER The number of passwords that must not be duplicated before a password is allowed to be used again.
0
Duplicate password checking is not performed.
1-32

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_USERID VARCHAR(3) Limit SST user profile name.
NO
The password can contain the upper case profile name.
YES
The password must not contain the upper case profile name.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_CHANGE_BLOCK INTEGER After a password change, the number of hours during which the password is blocked from being changed again.
0
There is no restriction on how frequently a user can change a password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_MINIMUM_LENGTH INTEGER Minimum password length.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_MAXIMUM_LENGTH INTEGER Maximum password length.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_REQUIRE_GROUPS VARCHAR(3) The password must contain characters from at least three of the four types of characters: Uppercase letters, lowercase letters, digits, and special characters.
NO
The password is not required to contain characters from multiple groups.
YES
The password must contain characters from at least three of the four groups.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_ADJACENT VARCHAR(3) Limit adjacent characters.
NO
The password has no limit for adjacent (consecutive) characters.
YES
The password may not contain two or more adjacent characters.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_REPEAT VARCHAR(3) Limit repeating characters.
NO
The password can contain multiple occurrences of the same character.
YES
The password may not contain two or more occurrences of the same character.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_POSITIONS VARCHAR(3) Limit characters in the same position.
NO
Characters can be used in the same position as in the previous password.
YES
The same character may not be used in the same position as in the previous password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_REQUIRE_DIGIT INTEGER The minimum number of digit characters that must occur in the password.
0
No digits are required.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_MAXIMUM_DIGITS VARCHAR(6) The maximum number of digit characters that may occur in the password.
*NOMAX
Any number of digits are allowed in the password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_DIGITS VARCHAR(3) Limit adjacent digits.
NO
The password has no limit for adjacent (consecutive) digits.
YES
The password must not contain two or more adjacent (consecutive) digits.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_DIGIT_FIRST VARCHAR(3) Limit digit in first position.
NO
The first character of the password can be a digit.
YES
The first character of the password must not be a digit.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_DIGIT_LAST VARCHAR(3) Limit digit in last position.
NO
The last character of the password can be a digit.
YES
The last character of the password must not be a digit.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_REQUIRE_LETTER INTEGER The minimum number of letter characters that must occur in the password.
0
No letters are required.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_MAXIMUM_LETTERS VARCHAR(6) The maximum number of letter characters that may occur in the password.
*NOMAX
Any number of letters are allowed in a password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_LETTERS VARCHAR(3) Limit adjacent letters.
NO
The password has no limit for adjacent (consecutive) letters.
YES
The password must not contain two or more adjacent (consecutive) letters.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_LETTER_FIRST VARCHAR(3) Limit letter in first position.
NO
The first character of the password can be a letter.
YES
The first character of the password must not be a letter.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_LETTER_LAST VARCHAR(3) Limit letter in last position.
NO
The last character of the password can be a letter.
YES
The last character of the password must not be a letter.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_REQUIRE_MIXED_CASE INTEGER The password must contain at least the specified number of uppercase and lowercase letters.
0
Mixed case letters are not required in a password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_REQUIRE_SPECIAL INTEGER The minimum number of special characters that must occur in the password.
0
No special characters are required.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_MAXIMUM_SPECIAL VARCHAR(6) The maximum number of special characters that may occur in the password.
*NOMAX
Any number of special characters are allowed in a password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_SPECIAL VARCHAR(3) Limit adjacent special characters.
NO
The password has no limit for adjacent (consecutive) special characters.
YES
The password must not contain two or more adjacent (consecutive) special characters.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_SPECIAL_FIRST VARCHAR(3) Limit special character in first position.
NO
The first character of the password can be a special character.
YES
The first character of the password must not be a special character.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PASSWORD_LIMIT_SPECIAL_LAST VARCHAR(3) Limit special character in last position.
NO
The last character of the password can be a special character.
YES
The last character of the password must not be a special character.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LEVEL INTEGER Previous System Service Tools password level.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_EXPIRATION_
INTERVAL
VARCHAR(7) Previous password expiration interval.
*NOMAX
The password does not expire.
*SSTATR
The password expiration interval defined for the SST security attribute is used.
1-366

Contains the null value when this value did not change, when ENTRY_TYPE is not H or S, or if the previous password expiration interval is not available.

PREV_PASSWORD_DUPLICATION INTEGER The previous values for the number of passwords that must not be duplicated before a password is allowed to be used again.
0
Duplicate password checking is not performed.
1-32

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_USERID VARCHAR(3) The previous value for limit SST user profile name.
NO
The password can contain the upper case profile name.
YES
The password must not contain the upper case profile name.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_CHANGE_BLOCK INTEGER The previous value for the number of hours during which the password is blocked from being changed a second time.
0
There is no restriction on how frequently a user can change a password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_MINIMUM_LENGTH INTEGER The previous value for minimum password length.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_MAXIMUM_LENGTH INTEGER The previous value for maximum password length.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_REQUIRE_GROUPS VARCHAR(3) The previous value for password must contain characters from at least three of the four types of characters: Uppercase letters, lowercase letters, digits, and special characters.
NO
The password is not required to contain characters from multiple groups.
YES
The password must contain characters from at least three of the four groups.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_ADJACENT VARCHAR(3) The previous value for limit adjacent characters.
NO
The password has no limit for adjacent (consecutive) characters.
YES
The password may not contain two or more adjacent (consecutive) characters.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_REPEAT VARCHAR(3) The previous value for limit repeating characters.
NO
The password can contain multiple occurrences of the same character.
YES
The password may not contain two or more occurrences of the same character.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_POSITIONS VARCHAR(3) The previous value for limit characters in the same position.
NO
Characters can be used in the same position as in the previous password.
YES
The same character may not be used in the same position as in the previous password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_REQUIRE_DIGIT INTEGER The previous value for the minimum number of digit characters that must occur in the password.
0
No digits are required.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_MAXIMUM_DIGITS VARCHAR(6) The previous value for the maximum number of digit characters that may occur in the password.
*NOMAX
Any number of digits are allowed in the password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_DIGITS VARCHAR(3) The previous value for limit adjacent digits.
NO
The password has no limit for adjacent (consecutive) digits.
YES
The password must not contain two or more adjacent (consecutive) digits.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_DIGIT_FIRST VARCHAR(3) The previous value for limit digit in first position.
NO
The first character of the password can be a digit.
YES
The first character of the password must not be a digit.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_DIGIT_LAST VARCHAR(3) The previous value for limit digit in last position.
NO
The last character of the password can be a digit.
YES
The last character of the password must not be a digit.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_REQUIRE_LETTER INTEGER The previous value for the minimum number of letter characters that must occur in the password.
0
No letters are required.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_MAXIMUM_LETTERS VARCHAR(6) The previous value for the maximum number of letter characters that may occur in the password.
*NOMAX
Any number of letters are allowed in a password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_LETTERS VARCHAR(3) The previous value for limit adjacent letters.
NO
The password has no limit for adjacent (consecutive) letters.
YES
The password must not contain two or more adjacent (consecutive) letters.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_LETTER_FIRST VARCHAR(3) The previous value for limit letter in first position.
NO
The first character of the password can be a letter.
YES
The first character of the password must not be a letter.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_LETTER_LAST VARCHAR(3) The previous value for limit letter in last position.
NO
The last character of the password can be a letter.
YES
The last character of the password must not be a letter.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_REQUIRE_MIXED_CASE INTEGER The previous value for yhe password must contain at least the specified number of uppercase and lowercase letters.
0
Mixed case letters are not required in a password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_REQUIRE_SPECIAL
INTEGER The previous value for the minimum number of special characters that must occur in the password.
0
No special characters are required.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_MAXIMUM_SPECIAL
VARCHAR(6) The previous value for the maximum number of special characters that may occur in the password.
*NOMAX
Any number of special characters are allowed in a password.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_SPECIAL VARCHAR(3) The previous value for limit adjacent special characters.
NO
The password has no limit for adjacent (consecutive) special characters.
YES
The password must not contain two or more adjacent (consecutive) special characters.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_SPECIAL_FIRST VARCHAR(3) The previous value for limit special character in first position.
NO
The first character of the password can be a special character.
YES
The first character of the password must not be a special character.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

PREV_PASSWORD_LIMIT_SPECIAL_LAST VARCHAR(3) The previous value for limit special character in last position.
NO
The last character of the password can be a special character.
YES
The last character of the password must not be a special character.

Contains the null value when this value did not change or when ENTRY_TYPE is not S.

DISK_OPERATIONS VARCHAR(3) Current privilege to perform disk operator service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

DISK_ADMIN VARCHAR(3) Current privilege to perform disk unit administrator service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

DISK_READ_ONLY VARCHAR(3) Current privilege to perform disk read only service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

SYSTEM_PARTITION_OPERATIONS VARCHAR(3) Current privilege to perform system partition operator service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

SYSTEM_PARTITION_ADMIN VARCHAR(3) Current privilege to perform system partition administrator service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

PARTITION_REMOTE_PANEL_KEY VARCHAR(3) Current privilege to change a panel key for the specified partition where it is secured.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

OPERATOR_PANEL_FUNCTIONS VARCHAR(3) Current privilege to use the operator panel functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

IPL VARCHAR(3) Current privilege to perform an IPL.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

INSTALL VARCHAR(3) Current privilege to perform a system install.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

PDC VARCHAR(3) Current privilege to perform Performance Data Collector (PDC) service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

HSM VARCHAR(3) Current privilege to perform Hardware Service Manager (HSM) functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

DAD VARCHAR(3) Current privilege to work with Display/Alter/Dump.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

MSD VARCHAR(3) Current privilege to perform a main storage dump.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

PAL VARCHAR(3) Current privilege to view and work with the Product Activity Log (PAL).
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

LIC_LOG VARCHAR(3) Current privilege to view and work with the Licensed Internal Code (LIC) log.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

LIC_PTFS VARCHAR(3) Current privilege to load Licensed Internal Code (LIC) PTFs.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

TRACE VARCHAR(3) Current privilege to read and perform the trace service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

DST VARCHAR(3) Current privilege to change the Dedicated Service Tools (DST) environment.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

REMOTE_SERVICE_SUPPORT VARCHAR(3) Current privilege to configure and connect to the system using the Remote Service Support interface.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

SERVICE_TOOLS_SECURITY VARCHAR(3) Current privilege to work with and change Licensed Internal Code (LIC) security values.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

SERVICE_TOOLS_SAVE_RESTORE VARCHAR(3) Current privilege to perform save and restore service security functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

DEBUG VARCHAR(3) Current privilege to use the service debug tools.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

SYSTEM_CAPACITY_OPERATIONS VARCHAR(3) Current privilege to perform system capacity operations service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

SYSTEM_CAPACITY_ADMIN VARCHAR(3) Current privilege to perform system capacity administration service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

SYSTEM_SECURITY VARCHAR(3) Current privilege to perform security service functions and to work with security lock down values.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

SST VARCHAR(3) Current privilege to sign-on and work with SST.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

TAKE_OVER_CONSOLE VARCHAR(3) Current privilege for a LAN console user to take over the console from another LAN console user.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H or R, or it is H and the privilege is not changing.

PREV_DISK_OPERATIONS VARCHAR(3) Previous privilege to perform disk operator service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_DISK_ADMIN VARCHAR(3) Previous privilege to perform disk unit administrator service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_DISK_READ_ONLY VARCHAR(3) Previous privilege to perform disk read only service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_SYSTEM_PARTITION_OPERATIONS VARCHAR(3) Previous privilege to perform system partition operator service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_SYSTEM_PARTITION_ADMIN VARCHAR(3) Previous privilege to perform system partition administrator service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_PARTITION_REMOTE_PANEL_KEY VARCHAR(3) Previous privilege to change a panel key for the specified partition where it is secured.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_OPERATOR_PANEL_FUNCTIONS VARCHAR(3) Previous privilege to use the operator panel functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_IPL VARCHAR(3) Previous privilege to perform an IPL.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_INSTALL VARCHAR(3) Previous privilege to perform a system install.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_PDC VARCHAR(3) Previous privilege to perform Performance Data Collector (PDC) service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_HSM VARCHAR(3) Previous privilege to perform Hardware Service Manager (HSM) functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_DAD VARCHAR(3) Previous privilege to work with Display/Alter/Dump.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_MSD VARCHAR(3) Previous privilege to perform a main storage dump.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_PAL VARCHAR(3) Previous privilege to view and work with the Product Activity Log (PAL).
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_LIC_LOG VARCHAR(3) Previous privilege to view and work with the Licensed Internal Code (LIC) log.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_LIC_PTFS VARCHAR(3) Previous privilege to load Licensed Internal Code (LIC) PTFs.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_TRACE VARCHAR(3) Previous privilege to read and perform the trace service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_DST VARCHAR(3) Previous privilege to change the Dedicated Service Tools (DST) environment.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_REMOTE_SERVICE_SUPPORT VARCHAR(3) Previous privilege to configure and connect to the system using the Remote Service Support interface.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_SERVICE_TOOLS_SECURITY VARCHAR(3) Previous privilege to work with and change Licensed Internal Code (LIC) security values.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_SERVICE_TOOLS_SAVE_RESTORE VARCHAR(3) Previous privilege to perform save and restore service security functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_DEBUG VARCHAR(3) Previous privilege to use the service debug tools.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_SYSTEM_CAPACITY_OPERATIONS VARCHAR(3) Previous privilege to perform system capacity operations service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_SYSTEM_CAPACITY_ADMIN VARCHAR(3) Previous privilege to perform system capacity administration service functions.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_SYSTEM_SECURITY VARCHAR(3) Previous privilege to perform security service functions and to work with security lock down values.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_SST VARCHAR(3) Previous privilege to sign-on and work with SST.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

PREV_TAKE_OVER_CONSOLE VARCHAR(3) Previous privilege for a LAN console user to take over the console from another LAN console user.
NO
Service tools user ID does not have the privilege
YES
Service tools user ID has the privilege

Contains the null value when ENTRY_TYPE is not H, or it is H and the privilege is not changing.

Example

  • List SST users that were created or deleted in the last month
    SELECT *
      FROM TABLE (
          SYSTOOLS.AUDIT_JOURNAL_DS (STARTING_TIMESTAMP => CURRENT TIMESTAMP - 1 MONTH)
        )
      WHERE ENTRY_TYPE IN ('D', 'R');