Authorize the started task

If you use RACF® to control access to the SYSOUT data sets on the JES spool, ensure that the user ID that is assigned to the Output Manager started task is granted UPDATE or CONTROL access authority for applicable resource profiles in the JESSPOOL class, and ALTER on the BJT.<.DB_QUALIFIER>.VIEW.RPRT resource profile. Otherwise, the started task might fail to issue PUT and GET calls to the SYSOUT application program interface (SAPI). In this event, the following console message will be issued:

$HASP186 text NOT SELECTED BY started_task_name/userid DUE TO SECURITY POLICY

The RACF Profile Name Format for the JESSPOOL class is:

localnodeid.userid.jobname.jobid.dsnumber.name

For example you might have a generic resource profile ‘**' for JESSPOOL: to give ITOM access to this profile, you would issue the following RACF command:

PERMIT ** CLASS(JESSPOOL) ID(ITOMSTC) ACCESS(UPDATE)

Where ITOMSTC is the USERID assigned to the Output Manager started task.

Another example is a generic profile for a specific Node. The following command gives Output Manager access to all to all output on node N1:

PERMIT N1.** CLASS(JESSPOOL) ID(ITOMSTC) ACCESS(UPDATE)

For more information, see the section titled "Controlling access to data that resides on SPOOL" in the "Initialization and Tuning Guide" for JES2 or JES3. Also refer to the z/OS® Security Server RACF Security Administrator's Guide.

If you use RACF resource profiles in the OPERCMDS class to control which users may issue JES commands, ensure that the user ID that is assigned to the Output Manager started task is granted UPDATE or CONTROL access authority for jesname.CANCEL.JSTOUT and jesname.MODIFY.JSTOUT (JES2), or for jesname.MODIFY.F (JES3)

For more information, see the section titled "Recovery from problems capturing an archive" in the Output Manager "Administrator's Guide". Also refer to the section titled "Authorizing the use of operator commands" in the "JES2 Initialization and Tuning Guide" or the section titled "Using RACF to Authorize the Use of Operator Commands" in the "JES3 Initialization and Tuning Guide". Also refer to the z/OS Security Server RACF Security Administrator's Guide.