Program commands

This table lists the specific authorities required for the program commands.

Command Referenced object Authority needed
For object For library
The object authorities required for the CRTxxx PGM commands are listed in the Languages table in Language commands.
ADDBKP 1 Breakpoint handling program *USE *EXECUTE
ADDPGM 1,2 Program *CHANGE *EXECUTE
ADDTRC 1 Trace handling program *USE *EXECUTE
CALL Program *OBJOPR, *EXECUTE *EXECUTE
Service program 4 *EXECUTE *EXECUTE
CHGDBG Debug operation *USE, *ADD, *DLT *EXECUTE
CHGHLLPTR 1      
CHGPGM Program *OBJMGT, *USE *USE
Program, if re-create option specified, optimization level changed, or performance data collection changed *OBJMGT, *USE *USE, *ADD, *DLT
Program, if USRPRF or USEADPAUT parameter is being changed Owner 7 *USE, *ADD, *DLT
CHGPGMVAR 1      
CHGPTR 1      
CHGSRVPGM Service program *OBJMGT, *USE *USE
Service program, if re-create option specified, optimization level changed, or performance data collection changed *OBJMGT, *USE *USE, *ADD, *DLT
Service program, if USRPRF or USEADPAUT parameter is being changed. Owner 7, *USE, *OBJMGT *USE, *ADD, *DLT
CLRTRCDTA 1      
CRTPGM Program, Replace(*NO) Refer to the general rules. *READ, *ADD
Program, Replace(*YES) Refer to the general rules. *READ, *ADD
Service program specified in the BNDSRVPGM parameter. *USE *EXECUTE
Module *USE *EXECUTE
Binding directory *USE *EXECUTE
CRTSRVPGM Service program, Replace(*NO) Refer to the general rules. *READ, *ADD
Service program, Replace(*YES) Refer to the general rules. *READ, *ADD
Module *USE *EXECUTE
Service program specified in BNDSRVPGM parameter *USE *EXECUTE
Export source file *OBJOPR *READ *EXECUTE
Binding directory *USE *EXECUTE
CVTCLSRC From-file *USE *EXECUTE
To-file *OBJOPR, *OBJMGT, *USE, *ADD, *DLT *READ, *ADD
DLTDFUPGM Program *OBJEXIST *EXECUTE
Display file *OBJEXIST *EXECUTE
DLTPGM Program *OBJEXIST *EXECUTE
DLTSRVPGM Service program *OBJEXIST *EXECUTE
DMPCLPGM CL Program *USE None 3
DSPBKP 1      
DSPDBG 1      
DSPDBGWCH      
DSPMODSRC2, 4 Source file *USE *USE
Any include files *USE *USE
Program *CHANGE *EXECUTE
DSPPGM Program *READ *EXECUTE
Program, if DETAIL(*MODULE) specified *USE *EXECUTE
DSPPGMREF Program *OBJOPR *EXECUTE
Output file Refer to the general rules. Refer to the general rules.
DSPPGMVAR 1      
DSPSRVPGM Service program *READ *EXECUTE
Service program, if DETAIL(*MODULE) specified *USE *EXECUTE
DSPTRC 1      
DSPTRCDTA 1      
ENDCBLDBG (COBOL/400 licensed program or S/38 environment) Program *CHANGE *EXECUTE
ENDDBG 1 Source debug program *USE *USE
ENDRQS 1     *EXECUTE
ENTCBLDBG (S/38 environment) Program *CHANGE *EXECUTE
EXTPGMINF Source file and database files *OBJOPR *EXECUTE
Program information   *READ, *ADD
PRTCMDUSG Program *USE *EXECUTE
RMVBKP 1      
RMVPGM 1      
RMVTRC 1      
RSMBKP 1      
RTVCLSRC Program *OBJMGT, *USE *EXECUTE
Service program *OBJMGT, *USE *EXECUTE
Module *OBJMGT, *USE *EXECUTE
Database source file *OBJOPR, *OBJMGT, *ADD, *DLT *EXECUTE
SETATNPGM Attention-key-handling program *EXECUTE *EXECUTE
SETPGMINF Database files *OBJOPR *EXECUTE
Source file *USE *EXECUTE
Root program *CHANGE *READ, *ADD
Subprogram *USE *EXECUTE
STRCBLDBG Program *CHANGE *EXECUTE
STRDBG Program 2 *CHANGE *EXECUTE
Source file 4 *USE *EXECUTE
Any include files 4 *USE *EXECUTE
Source debug program *USE *EXECUTE
Unmonitored message program *USE *EXECUTE
TFRCTL 4 Program *USE or a data authority other than *EXECUTE *EXECUTE
Some language functions when using high-level languages *READ *EXECUTE
UPDPGM Program *OBJMGT, *OBJEXIST, *USE *USE, *ADD
Service program specified in the BNDSRVPGM parameter. *USE *EXECUTE
Module *USE *EXECUTE
Binding directory *USE *EXECUTE
UPDSRVPGM Service Program *OBJMGT, *OBJEXIST, *USE *USE, *ADD
Service program specified in BNDSRVPGM parameter *USE *EXECUTE
Module *USE *EXECUTE
Binding directory *USE *EXECUTE
Export source file *OBJOPR *READ *EXECUTE
WRKPGM 6 Program Any authority *USE
WRKSRVPGM 6 Service program Any authority *USE
1
When a program is in a debug operation, no further authority is needed for debug commands.
2
If you have *SERVICE special authority, you need only *USE authority to the program.
3
The DMPCLPGM command is requested from within a CL program that is already running. Because authority to the library containing the program is checked at the time the program is called, authority to the library is not checked again when the DMPCLPGM command is run.
4
Applies only to ILE programs.
5
See the Authorization, privileges and object ownership for more information about security requirements for SQL statements.
6
To use individual operations, you need the authority required by the individual operation.
7
You must own the program or have *ALLOBJ and *SECADM special authorities.