OA43678: MSGICH408I RACF VIOLATION FOR SETGRS CNS=XXX,YYY OPERATOR CMD

APAR status

• Closed as documentation error.

Error description

• z/OS V1R13 MVS SYstem Commands book chapter  '3.2.2.2 MVS
  Commands, RACF Access Authorities, and Resource Names'
  describes RACF profile MVS.SETGRS.CNS authority level UPDATE in
  class OPERCMDS is required in order to perform the
  SETGRS,CNS=xxx,yyy  operator command. This is
  correct but in addition to that profile an additional profile
  with the name MVS.SETGRS.GRS access CONTROL is required in
  order to allow the SETGRS,CNS=xxx,yyy command execution.
  

Local fix

• NONE, define the additional RACF  profile MVS.SETGRS.GRS
  with access CONTROL authority
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All z/OS environments where the SETGRS       *
  *                 is to be used.                               *
  *                                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: See APAR Abstract and Error             *
  *                      Description.                            *
  *                                                              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  
  See APAR Abstract and Error Description.
  

Problem conclusion

• The following addition will be made in the z/OS MVS System
  Commands publication...
  
  3.0 Chapter 3. System Console Operations
   3.2 Defining and Changing Console Characteristics
    3.2.2 Changing Console Characteristics
     3.2.2.2 MVS Commands, RACF Access Authorities, and Resource
     :                                                       Names
     Table 3.7
     :
  |  SETGRS              CONTROL              MVS.SETGRS.GRS
     ____________________________________________________________
     SETGRS MODE=STAR    UPDATE               MVS.SETGRS.TOLINT
     ENQMAXA                                  MVS.SETGRS.RESMIL
     ENQMAXU                                  MVS.SETGRS.MODE.STAR
     CNS                                      MVS.SETGRS.SYNCHRES
                                              MVS.SETGRS.GRSQ
                                              MVS.SETGRS.ENQMAXA
                                              MVS.SETGRS.ENQMAXU
                                              MVS.SETGRS.CNS
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

Applicable component levels