423: SURROGATE_CHECK_FAILED

Explanation

A DPL request has been issued specifying a USERID parameter. The userid specified was subject to a surrogate user check. The surrogate user check failed. The surrogate security check verifies whether the EXCI batch region's userid is authorized as a surrogate of the userid specified on the DPL call.

System Action

The DPL call is rejected. The MVS™ external security manager's return code and reason code are returned in subreason field-1 and field-2. For RACF®, these are documented in the z/OS Security Server RACROUTE Macro Reference.

User Response

Ensure that the EXCI batch region's userid has READ access to the profile userid.DFHEXCI in the SURROGAT general resource class, where userid is the userid specified on the DPL call.

See Surrogate user checking for more information.