Configuration commands

This table lists the specific authorities required for the configuration commands.

Commands identified by (Q) are shipped with public authority *EXCLUDE. Commands shipped with public authority *EXCLUDE shows which IBM-supplied user profiles are authorized to the command. The security officer can grant *USE authority to others.

Command Referenced object Authority needed
For object For library
PRTDEVADR Controller description (CTL) *USE *EXECUTE
Device description *USE *EXECUTE
RSTCFG (Q) 5 Every object being restored over by a saved version *OBJEXIST 1 *EXECUTE
To-library   *ADD, *EXECUTE 1
User profile owning objects being created *ADD 1  
Tape unit *USE *EXECUTE
Tape file (QSYSTAP) *USE 1 *EXECUTE
Save file, if specified *USE *EXECUTE
Printer output (QPSRLDSP), if output(*print) is specified *USE *EXECUTE
Output file, if specified Refer to the general rules. Refer to the general rules.
QSYS/QASRRSTO field reference file, if output file is specified and it does not exist *USE *EXECUTE
RTVCFGSTS Object *OBJOPR *EXECUTE
RTVCFGSRC Start of change8End of change Object *USE *EXECUTE
Source file *OBJOPR, *OBJMGT, *ADD, *DLT *EXECUTE
SAVCFG 2 Save file, if empty *USE, *ADD *EXECUTE
Save file, if records exist in it *USE, *ADD, *OBJMGT *EXECUTE
SAVRSTCFG On the source system, same authority as required by SAVCFG command.    
On the target system, same authority as required by RSTCFG command.    
VRYCFG 3, 5, 6, 7 Object *USE, *OBJMGT *EXECUTE
WRKCFGSTS 4, Start of change8End of change Object *OBJOPR *EXECUTE
1
If you have *SAVSYS special authority, you do not need the authority specified.
2
You must have *SAVSYS special authority.
3
If a user has *JOBCTL special authority, authority to the object is not needed.
4
To use the individual operations, you must have the authority required by the individual operation.
5
You must have *ALLOBJ special authority to specify a value other than *NONE for the Allow object differences (ALWOBJDIF) parameter, or RESETSYS(*YES).
6
You must have *IOSYSCFG special authority when the object is a media library and the status is *ALLOCATE or *DEALLOCATE.
7
You must have *IOSYSCFG and *SECADM special authorities to specify GENPTHCERT(*YES).
Start of change8End of change
Start of changeYou must have *IOSYSCFG special authority or be authorized to the QIBM_IOSYSCFG_VIEW function ID. End of change