High availability commands

This table lists the specific authorities required for the high availability commands.

Commands identified by (Q) are shipped with public authority *EXCLUDE. Commands shipped with public authority *EXCLUDE shows which IBM-supplied user profiles are authorized to the command. The security officer can grant *USE to others.

Command Referenced object Authority needed
For object For library
ADDASPCPYD (Q)1 Auxiliary storage pool (ASP) device description *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
ADDCADMRE (Q)1 QMRAP1 service program *USE  
ADDCADNODE (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
ADDCLUMON (Q)1 QCSTCTL2 service program *USE  
ADDCLUNODE (Q)1 QCSTCTL service program *USE  
ADDCRGDEVE (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Device description *USE, *OBJMGT  
Controller description *USE, *OBJMGT  
Line description *USE, *OBJMGT  
Network server description *USE, *OBJMGT  
ADDCRGNODE (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Failover message queue *OBJOPR, *ADD *EXECUTE
Distribute information user queue *OBJOPR, *ADD *EXECUTE
ADDDEVDMNE (Q)1 QCSTDD service program *USE  
ADDHACFGD (Q)1      
ADDHAPCY (Q)1      
ADDHYSSTGD (Q)1      
ADDSVCCPYD (Q)1 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
Secure Shell (SSH) key file *R  
CFGCRGCNR (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Managed CRG *CHANGE to each CRG specified on the configuration object list.
CFGGEOMIR (Q)1,6      
CHGASPCPYD (Q)1 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
CHGASPSSN (Q) 5 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
CHGCAD (Q)1 QCSTCRG1 service program *USE  
CHGCLU (Q)1 QCSTCTL service program *USE  
CHGCLUMON (Q)1 QCSTCTL2 service program *USE  
CHGCLUNODE (Q)1 QCSTCTL service program *USE  
CHGCLURCY Cluster resource group *USE  
  *JOBCTL  
  *SERVICE or Service Trace function  
CHGCLUVER (Q)1 QCSTCTL2 service program *USE  
CHGCRG (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Device description *USE, *OBJMGT  
Failover message queue *OBJOPR, *ADD *EXECUTE
Controller description *USE, *OBJMGT  
Line description *USE, *OBJMGT  
Network server description *USE, *OBJMGT  
CHGCRGCNR (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Managed CRG For each managed CRG you must have the same authority as the CHGCRG command.
CHGCRGDEVE (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Device description *USE, *OBJMGT  
Controller description *USE, *OBJMGT  
Line description *USE, *OBJMGT  
Network server description *USE, *OBJMGT  
CHGCRGPRI (Q)1 QCSTCRG2 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Device description *USE, *OBJMGT  
Vary configuration (VFYCFG) command *USE  
Controller description *USE, *OBJMGT  
Line description *USE, *OBJMGT  
Network server description *USE, *OBJMGT  
CHGCSMSSN (Q)1 Auxiliary storage pool (ASP) device description *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
CHGHACFGD (Q)1      
CHGHAPCY (Q)1      
CHGHYSSTGD (Q)1      
CHGHYSSTS (Q)1      
CHGSVCCPYD (Q)1 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
Secure Shell (SSH) key file *R  
CHGSVCSSN (Q)1 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
Secure Shell (SSH) key file *R  
CRTCAD (Q)1 QCSTCRG1 service program *USE  
Cluster resource group   *OBJOPR, *ADD, *READ (QUSRSYS)
CRTCLU (Q)1 QCSTCTL service program *USE  
CRTCRG (Q) 1 QCSTCRG1 service program *USE  
Cluster resource group library   *OBJOPR, *ADD, *READ (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Device description *USE, *OBJMGT  
Distribute information user queue *OBJOPR, *ADD *EXECUTE
Failover message queue *OBJOPR, *ADD *EXECUTE
Controller description *USE, *OBJMGT  
Line description *USE, *OBJMGT  
Network server description *USE, *OBJMGT  
CRTCRGCNR (Q)1 QCSTCRG1 service program *USE  
Cluster resource group library   *OBJOPR, *ADD, *READ (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Managed CRG *CHANGE to each CRG specified on the configuration object list.
DLTCAD (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *OBJEXIST, *USE *EXECUTE (QUSRSYS)
DLTCLU (Q)1 QCSTCTL service program *USE  
DLTCRG1 Cluster resource group *OBJEXIST, *USE *EXECUTE (QUSRSYS)
DLTCRGCLU (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *OBJEXIST, *USE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
DLTCRGCNR (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *OBJEXIST, *USE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
DMPCLUTRC Cluster resource group *USE  
  *SERVICE or Service Trace function  
DSPASPCPYD (Q) Auxiliary storage pool (ASP) device description *USE  
DSPASPSSN (Q) Auxiliary storage pool (ASP) device description *USE  
DSPCLUINF      
DSPCRGINF Cluster resource group *USE *EXECUTE (QUSRSYS)
DSPCRGCNR (Q) Cluster resource group *USE *EXECUTE (QUSRSYS)
DSPCSMSSN (Q)1 Auxiliary storage pool (ASP) device description *USE  
DSPHACFGD (Q)      
DSPHAPCY (Q)      
DSPHYSSTGD (Q)1      
DSPHYSSTS (Q)1      
DSPSVCCPYD (Q) Auxiliary storage pool (ASP) device description *USE  
DSPSVCSSN (Q) Auxiliary storage pool (ASP) device description *USE  
Secure Shell (SSH) key file *R  
ENDASPSSN (Q)5 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
ENDCAD (Q) QCSTCRG2 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
ENDCLUNOD (Q)1 QCSTCTL service program *USE  
ENDCHTSVR (Q) Authorization list *CHANGE  
ENDCRG (Q)1 QCSTCRG2 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
ENDCRGCNR (Q)1 QCSTCRG2 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
Managed CRG For each managed CRG you must have the same authority as the ENDCRG command.
ENDCSMSSN (Q)1 Auxiliary storage pool (ASP) device description *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
ENDSVCSSN (Q)1 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
Secure Shell (SSH) key file *R  
PRTCADMRE (Q) QCSTCRG3 service program *USE  
QFPADAP1 *USE  
Cluster Resource Group *USE *EXECUTE (QUSRSYS)
RMVASPCPYD (Q)1 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
RMVCADMRE (Q)1 QMRAP1 service program *USE  
RMVCADNODE (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
RMVCLUMON (Q)1 QCSTCTL2 service program *USE  
RMVCLUNODE (Q)1 QCSTCTL service program *USE  
RMVCRGDEVE (Q)1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE *EXECUTE
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Device description *USE, *OBJMGT  
Controller description *USE, *OBJMGT  
Line description *USE, *OBJMGT  
Network server description *USE, *OBJMGT  
RMVCRGNODE (Q) 1 QCSTCRG1 service program *USE  
Cluster resource group *CHANGE, *OBJEXIST *EXECUTE
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Device description *USE, *OBJMGT  
Controller description *USE, *OBJMGT  
Line description *USE, *OBJMGT  
Network server description *USE, *OBJMGT  
RMVDEVDMNE (Q)1 QCSTDD service program *USE  
RMVHACFGD (Q)1      
RMVHAPCY (Q)1      
RMVHYSSTGD (Q)1      
RMVSVCCPYD (Q)1 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
Secure Shell (SSH) key file *R  
RSTHAPCY (Q)1      
RTVASPCPYD Auxiliary storage pool (ASP) device description *USE  
RTVASPSSN Auxiliary storage pool (ASP) device description *USE  
RTVCLU QHASM/QHAAPI service program *USE  
QCSTCTL1 service program *USE  
RTVCRG QCSTCTL1 service program *USE  
QCSTCRG3 service program *USE  
Cluster resource group *USE *EXECUTE (QUSRSYS)
RTVCSMSSN (Q)1 Auxiliary storage pool (ASP) device description *USE  
RTVSVCCPYD (Q) Auxiliary storage pool (ASP) device description *USE  
RTVSVCSSN (Q) Auxiliary storage pool (ASP) device description *USE  
Secure Shell (SSH) key file *R  
SAVHAPCY (Q)      
STRASPSSN (Q) Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Job description *READ *EXECUTE
STRCAD (Q)1 QCSTCRG2 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
STRCHTSVR Authorization list *CHANGE  
STRCLUNOD (Q)1 QCSTCTL service program *USE  
STRCRG (Q)1 QCSTCRG2 service program *USE  
Cluster resource group *CHANGE *EXECUTE
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Device description *USE, *OBJMGT  
Controller description *USE, *OBJMGT  
Line description *USE, *OBJMGT  
Network server description *USE, *OBJMGT  
STRCRGCNR (Q)1 QCSTCRG2 service program *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Exit program *EXECUTE2 *EXECUTE2
User profile to run exit program *USE  
Managed CRG For each managed CRG you must have the same authority as the STRCRG command.
STRCSMSSN (Q)1 Auxiliary storage pool (ASP) device description *USE  
Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
STRSVCSSN (Q)1 Cluster resource group *CHANGE *EXECUTE (QUSRSYS)
Auxiliary storage pool (ASP) device description *USE  
Secure Shell (SSH) key file *R  
WRKASPCPYD (Q) Auxiliary storage pool (ASP) device description *USE  
WRKCADMRE (Q) Cluster resource group *CHANGE *EXECUTE
QCLUSTER user profile *USE  
WRKCLU4 Cluster resource group *USE *EXECUTE
WRKHACFGD (Q)      
WRKHAPCY (Q)      
WRKHYSSTS (Q)1      
1
You must have *IOSYSCFG special authority to use this command.
2
The authority applies to calling user profile and user profile to run exit program.
3
The calling user profile is granted *CHANGE and *OBJEXIST authority to the cluster resource group.
4
You must have *SERVICE special authority or be authorized to the QIBM_SERVICE_TRACE function ID.
5
You must have *JOBCTL special authority to use this command.
6
You must have *SERVICE special authority or be authorized to the QIBM_QYAS_SERVICE_DISKMGMT function ID.