z/OS user ID cannot log on the Configuration Tool successfully

The z/OS® user ID cannot log on the Configuration Tool successfully.

Symptom

The z/OS user ID cannot log on the Configuration Tool successfully. The following messages are in the HBOCFGT job log:

CWWKS1100A: Authentication did not succeed for user ID user_id. An invalid user ID or password was 
specified.            
CWWKS2907E: SAF Service IRRSIA00_CREATE did not succeed because user user_id  has insufficient authority to 
access APPL-ID HBOCFGT. SAF return code 0x00000008. RACF return code 0x00000008. RACF reason code 0x00000020.
CWIML4537E: The login operation could not be completed. The specified principal name user_id is not found in 
the back-end repository.   
com.ibm.wsspi.security.wim.exception.PasswordCheckFailedException: CWIML4537E: The login operation could not 
be completed. The specified principal name user_id is not found in the back-end repository.

Cause

The z/OS user ID you used to access the Configuration Tool was not added to the user group AUTHORIZED_GROUP.

Solution

Run the following command to add the user ID to the user group AUTHORIZED_GROUP:

CONNECT user_id GROUP(group_id)

Change user_id to the user ID that you want to use to access and use the Configuration Tool. Change group_id to the RACF® group that is assigned to the user group AUTHORIZED_GROUP which is created by the defracf.cmd script. The default value is HBOUSRGP.