Commands shipped with public authority *EXCLUDE

This section identifies which commands have restricted authorization (public authority is *EXCLUDE) when your system is shipped. It shows which IBM-supplied user profiles are authorized to use these restricted commands.

For more information about IBM-supplied user profiles, see the topic IBM-supplied user profiles.

In Table 1, commands that are specifically authorized to one or more IBM-supplied user profiles, in addition to the security officer, have an S under the profile names for which they are authorized.

Any commands not listed here are public, which means they can be used by all users. However, some commands require special authority, such as *SERVICE or *JOBCTL. The special authorities required for a command are listed in Authority required for objects used by commands.

If you choose to grant other users or the public *USE authority to these commands, update this table to indicate that which commands are no longer restricted on your system. Using some commands might require the authority to certain objects on the system as well as to the commands themselves. See Authority required for objects used by commands for the object authorities required for commands.

Note: Proxy Commands
  • The commands listed in table Table 1 are shipped by IBM® with public authority of *EXCLUDE. If you notice on your system that the public authority of a command listed in this table shows a value of *USE and is in the QSYS library then this command might be a proxy command. Proxy commands are shipped by IBM in the QSYS library and have public authority of *USE. It is the actual command in the product library that will have public authority of *EXCLUDE (unless the public authority has been changed by an authorized user of your system). Authority to the proxy command is checked by the system as well as authority to the actual target command in the product library.
  • To determine if the command is a proxy command, run the DSPOBJD command specifying the command name in library QSYS on the DSPOBJD OBJ parameter. If the command is a proxy command it will show an attribute value of PRX. To determine the authority of the actual target command in the product library, first use the DSPCMD command on the proxy command in the QSYS library. This will show you the current proxy chain. Then, use the DSPOBJAUT command and specify the library qualified command name of the last target command in the current proxy chain. This will show you the authority on the actual command in the product library.
Table 1. Authorities of IBM-supplied user profiles to restricted commands
Command Name QPGMR, Start of changeQPGMR_NCEnd of change QSYSOPR, Start of changeQSYSOPR_NCEnd of change QSRV QSRVBAS
ADDASPCPYD        
ADDCADMRE        
ADDCADNODE        
ADDCLUMON        
ADDCLUNODE        
ADDCMDCRQA S S S S
ADDCRGDEVE        
ADDCRGNODE        
ADDCRSDMNK        
ADDDEVDMNE        
ADDDIRINST        
ADDDSTQ S S    
ADDDSTRTE S S    
ADDDSTSYSN S S    
ADDEXITPGM        
ADDDWDFN        
ADDHACFGD        
ADDHAPCY        
ADDHYSSTGD        
ADDJWDFN        
ADDMFS        
ADDMSTPART        
ADDNETJOBE        
ADDOBJCRQA S S S S
ADDOPTCTG        
ADDOPTSVR        
ADDPEXDFN S   S  
ADDPEXFTR S   S  
ADDPRDCRQA S S S S
ADDPRDLICI S S S S
ADDPTFCRQA S S S S
ADDRPYLE S      
ADDRSCCRQA S S S S
ADDSVCCPYD        
ADDTRCFTR        
ADDWLCGRP        
ADDWLCPRDE        
ANSQST        
ANZCMDPFR        
ANZDBF        
ANZDBFKEY        
ANZDFTPWD        
ANZOBJCVN        
ANZPFRDTA        
ANZPGM        
ANZPRB S S S S
ANZPRFACT        
ANZS34OCL        
ANZS36OCL        
APYJRNCHG S   S  
APYPTF     S  
APYRMTPTF S S S S
Start of changeDSPFMWSTSEnd of change Start of changeSEnd of change Start of changeSEnd of change Start of changeSEnd of change Start of changeSEnd of change
DSPHACFGD        
CFGACCWEB        
CFGCRGCNR        
CFGDEVASP        
CFGDSTSRV S S    
CFGGEOMIR        
Start of changeCFGHOSTSVREnd of change Start of change End of change Start of change End of change Start of change End of change Start of change End of change
CFGRPDS S S    
CFGSYSSEC        
CHGACTSCDE        
CHGASPA        
CHGASPACT        
CHGASPCPYD        
CHGASPSSN        
CHGAUTCOL        
CHGCAD        
CHGCLU        
CHGCLUCFG        
CHGCLUMON        
CHGCLUNODE        
CHGCLURCY        
CHGCLUVER        
CHGCMDCRQA S S S S
CHGCRG        
CHGCRGCNR        
CHGCRGDEVE        
CHGCRGPRI        
CHGCRSDMNK        
CHGCSMSSN        
CHGDIRSRVA        
CHGDSTQ S S    
CHGDSTRTE S S    
CHGEXPSCDE        
CHGFCNARA        
CHGGPHFMT        
CHGGPHPKG        
CHGHACFGD        
CHGHAPCY        
CHGHYSSTGD        
CHGHYSSTS        
CHGJOBTRC        
CHGJOBTYP        
CHGJRN S S S  
CHGJRNA S S    
CHGLICINF        
CHGMGDSYSA S S S S
CHGMGRSRVA S S S S
CHGMSTK        
CHGNETA        
CHGNETJOBE        
CHGNFSEXP        
CHGNWSA        
CHGNWSCFG        
CHGOBJCRQA S S S S
CHGOPTA        
CHGPEXDFN S   S  
CHGPRB S S S S
CHGPRDCRQA S S S S
CHGPRDOBJD S S S S
CHGPTFCRQA S S S S
CHGPTR     S  
CHGQSTDB        
CHGRCYAP S S    
CHGRPYLE S      
CHGRSCCRQA S S S S
CHGSVCCPYD        
CHGSVCSSN        
CHGSYSLIBL        
CHGSYSVAL S S S  
CHGS34LIBM        
CHGWLCGRP        
CHKASPBAL        
CHKCMNTRC     S  
CHKMSTKVV        
CHKPRDOPT S S S S
CLRMSTKEY        
CPHDTA        
CPYFCNARA        
CPYFRMLDIF        
CPYFRMMSD        
CPYGPHFMT        
CPYGPHPKG        
CPYPFRCOL        
CPYPFRDTA        
CPYPTF S S S S
CPYPTFCVR S S S S
CPYPTFGRP S S S S
CPYPTFSAVF S S S S
CPYTOLDIF        
CPYTOMSD        
CRTADMDMN        
CRTAUTHLR        
CRTCAD        
CRTCLS        
CRTCLS        
CRTCLU        
CRTCRG        
CRTCRGCNR        
CRTFCNARA        
CRTGPHFMT        
CRTGPHPKG        
CRTHSTDTA        
CRTJOBD        
CRTLASREP S      
CRTNWSCFG        
CRTPFRDTA        
CRTPFRSUM        
CRTPRDDFN S S S S
CRTPRDLOD S S S S
CRTPTF S S S S
CRTPTFPKG S S S S
CRTPEXDTA S   S  
CRTQSTDB        
CRTQSTLOD        
CRTSBSD S S    
CRTUDFS        
CRTUDFS        
CRTVLDL        
CVTBASSTR        
CVTBASUNF        
CVTBGUDTA        
CVTDIR        
CVTPFRCOL        
CVTPFRDTA        
CVTPFRTHD        
CVTS36FCT        
CVTS36JOB        
CVTS38JOB        
CVTTCPCL S S S S
DB2LDIF        
DLTADMDMN        
DLTAPARDTA S S S S
DLTAUTCOL        
DLTCAD        
DLTCLU        
DLTCMNTRC     S  
DLTCRGCLU        
DLTCRGCNR        
DLTEXPSPLF        
DLTFCNARA        
DLTGPHFMT        
DLTGPHPKG        
DLTHSTDTA        
DLTINTSVR        
DLTLICPGM        
DLTNWSCFG        
DLTPEXDTA S   S  
DLTPFRCOL        
DLTPFRDTA        
DLTPRB S S S S
DLTPRDDFN S S S S
DLTPRDLOD S S S S
DLTPTF S S S S
DLTQST        
DLTQSTDB        
DLTRMTPTF S S S S
DLTSMGOBJ S S S S
DLTUDFS        
DLTVLDL        
DLTWNTSVR        
DMPDLO S S S S
DMPJOB S S S S
DMPJOBINT S S S S
DMPMEMINF        
DMPOBJ     S S
DMPSYSOBJ S S S S
DMPTRC S   S  
DMPUSRPRF        
DSPASPCPYD        
DSPASPSSN        
DSPCLUINF        
DSPCRGCNR        
DSPCRGINF        
DSPCSMSSN        
DSPDSTLOG        
DSPHACFGD        
DSPHAPCY        
DSPHSTGPH        
DSPHYSSTGD        
DSPHYSSTS        
DSPMGDSYSA S S S S
DSPNWSCFG        
DSPPFRDTA        
DSPPFRGPH        
DSPPTF S S S S
DSPPTFAPYI S S S S
DSPPTFCVR S S S S
DSPPTFGRP S S S S
DSPSRVSTS S S S S
DSPSVCCPYD        
DSPSVCSSN        
DSPUSGINF        
DSPWLCGRP        
EDTCPCST   S    
EDTQST        
EDTRBDAP   S    
EDTRCYAP S S    
ENCCPHK        
ENCFRMMSTK        
ENCTOMSTK        
ENDACCWEB        
ENDASPBAL        
ENDASPSSN        
ENDAUTCOL        
ENDCAD        
ENDCHTSVR        
ENDCLUNOD        
ENDCMNTRC     S  
ENDCRG        
ENDCRGCNR        
ENDCSMSSN        
ENDDBGSVR S S S S
ENDDW        
ENDHOSTSVR S S S S
ENDIDXMON        
ENDJOBABN S S S  
ENDJOBTRC        
ENDJW        
ENDMGDSYS S S S S
ENDMGRSRV S S S S
ENDMSF   S S S
ENDNFSSVR   S S S
ENDPEX S   S  
ENDPFRTRC     S  
Start of changeENDRCLEnd of change Start of change End of change Start of change End of change Start of change End of change Start of change End of change
ENDSRVJOB S S S S
ENDSVCSSN        
ENDSYSMGR S S S S
ENDTCP S S S S
ENDTCPCNN S S S S
ENDTCPIFC S S S S
ENDTCPSVR S S S S
ENDWCH        
GENCPHK        
GENCRSDMNK        
GENLICKEY S S S S
GENMAC        
GENPIN        
GENS36RPT        
GENS38RPT        
GRTACCAUT        
HLDCMNDEV S S S S
HLDDSTQ S S    
HLDPTF S S S S
INSINTSVR        
INSPTF2     S  
INSRMTPRD S S S S
INSWNTSVR        
INZDSTQ S S    
INZNWSCFG        
INZSYS        
LDIF2DB        
LODOPTFMW        
LODPTF     S  
LODQSTDB        
MGRS36        
MGRS36APF        
MGRS36CBL        
MGRS36DFU        
MGRS36DSPF        
MGRS36ITM        
MGRS36LIB        
MGRS36MNU        
MGRS36MSGF        
MGRS36QRY        
MGRS36RPG        
MGRS36SEC        
MGRS38OBJ        
MIGRATE        
MOVPFRCOL        
PKGPRDDST S S S S
PKGPRDOPT S S S S
PRTACTRPT        
PRTCMNTRC     S  
PRTCPTRPT        
PRTJOBRPT        
PRTJOBTRC        
PRTLCKRPT        
PRTPOLRPT        
PRTRSCRPT        
PRTSYSRPT        
PRTTNSRPT        
PRTTRCRPT        
PRTDSKINF        
PRTERRLOG S S S S
PRTINTDTA S S S S
PRTPRFINT        
PWRDWNSYS   S    
RCLAPPN        
RCLDBXREF        
RCLOBJOWN        
RCLOPT        
RCLSPLSTG S S S S
RCLSTG S S S S
RCLTMPSTG S S S S
RESMGRNAM S S S S
RLSCMNDEV S S S S
RLSDSTQ S S    
RLSIFSLCK        
RLSPTF S S S S
RLSRMTPHS S S    
RMVACC        
RMVACCWEB        
RMVASPCPYD        
RMVCADMRE        
RMVCADNODE        
RMVCLUMON        
RMVCLUNODE        
RMVCRGDEVE        
RMVCRGNODE        
RMVCRSDMNK        
RMVDEVDMNE        
RMVDFRID        
RMVDIRINST        
RMVDSTQ S S    
RMVDSTRTE S S    
RMVDSTSYSN S S    
RMVDWDFN        
RMVEXITPGM        
RMVHACFGD        
RMVHAPCY        
RMVHYSSTGD        
RMVJRNCHG S   S  
RMVJWDFN        
RMVLANADP        
RMVMFS        
RMVNETJOBE        
RMVOPTCTG        
RMVOPTSVR        
RMVPEXDFN S   S  
RMVPEXFTR S   S  
RMVPTF     S  
RMVRMTPTF S S S S
RMVRPYLE S      
RMVSVCCPYD        
RMVTRCFTR        
RMVWLCGRP        
RMVWLCPRDE        
RSTAUT        
RST3        
RSTCFG        
RSTDFROBJ        
RSTDLO        
RSTHAPCY        
RSTLIB        
RSTLICPGM        
RSTOBJ3        
RSTPFRCOL        
RSTPFRDTA        
RSTS36F        
RSTS36FLR        
RSTS36LIBM        
RSTS38AUT        
RSTUSRPRF        
RTVCSMSSN        
RTVSVCCPYD        
RTVSVCSSN        
RTVDSKINF        
RTVPRD S S S S
RTVPTF S S S S
RTVSMGOBJ S S S S
RTVTCPINF        
RUNLPDA S S S S
RUNSMGCMD S S S S
RUNSMGOBJ S S S S
RVKPUBAUT        
SAVAPARDTA S S S S
SAVHAPCY        
SAVLICPGM        
SAVPFRCOL        
SAVPFRDTA        
SAVRSTCHG        
SAVRSTLIB        
SAVRSTOBJ        
SBMFNCJOB        
SBMNWSCMD        
SETMSTK        
SETMSTKEY        
SNDDSTQ S S    
SNDPRD S S S S
SNDPTF S S S S
SNDPTFORD     S S
SNDSMGOBJ S S S S
SNDSRVRQS     S S
STRACCWEB        
STRASPBAL        
STRASPSSN        
STRAUTCOL        
STRCAD        
STRCHTSVR        
STRCLUNOD        
STRCMNTRC     S  
STRCRG        
STRCRGCNR        
STRCSMSSN        
STRDBG S   S S
STRDBGSVR S S S S
STRDW        
STRHOSTSVR S S S S
STRIDXMON        
STRJW        
STRJOBTRC        
STRMGDSYS S S S S
STRMGRSRV S S S S
STRMSF1   S S S
STRNFSSVR        
STRNETINS        
STROBJCVN        
STRPEX S   S  
STRPFRG        
STRPFRT        
STRPFRTRC     S  
Start of changeSTRRCLEnd of change Start of change End of change Start of change End of change Start of change End of change Start of change End of change
STRRGZIDX        
STRSPLRCL        
STRSRVJOB S S S S
STRSST     S  
STRSVCSSN        
STRSYSMGR S S S S
STRS36MGR        
STRS38MGR        
STRTCP S S S S
STRTCPIFC S S S S
STRTCPSVR S S S S
STRUPDIDX        
STRWCH        
TRCASPBAL        
TRCCPIC        
TRCICF        
TRCINT S   S  
TRCJOB S S S S
TRCTCPAPP     S S
TRNPIN        
UPDPTFINF        
UPDTCPINF        
VFYCMN S S S S
VFYLNKLPDA S S S S
VFYMSTK        
VFYPIN        
VFYPRT S S S S
VFYTAP S S S S
WRKASPCPYD        
WRKCADMRE        
WRKCNTINF     S S
WRKDEVTBL        
WRKDPCQ S S    
WRKDSTQ S S    
WRKFCNARA        
WRKHACFGD        
WRKHAPCY        
WRKHYSSTS        
WRKJRN S S S  
WRKLICINF        
Start of changeWRKMIGSTSEnd of change        
WRKNWSCFG        
WRKPEXDFN S   S  
WRKPEXFTR S   S  
WRKPGMTBL        
WRKPRB S S S S
WRKPTF S S S S
WRKPTFGRP S S S S
WRKPTFORD     S S
WRKSPTPRD S S S S
WRKSRVPVD     S S
WRKSYSACT        
WRKTRC        
WRKTXTIDX        
WRKUSRTBL        
WRKWCH        
1
The QMSF user profile is also authorized to this command.
2
QSRV can only run this command if an IPL is not being done.
3
In addition to QSYS, user profile QRDARS400 has authority.