News
Abstract
The documentation for Alert "System authority removed (1106)" in the zSecure Alert User Reference Manual was updated.
Content
System authority removed (1106)
The administrator monitors alert 1106 to manage the use and removal of system level authority.
An alert is sent when a system-level authority, that is, SPECIAL, OPERATIONS, AUDITOR, ROAUDIT, or CLAUTH, is removed from a user.
An alert is sent when a system-level authority, that is, SPECIAL, OPERATIONS, AUDITOR, ROAUDIT, or CLAUTH, is removed from a user.
To receive this alert, you must have SETROPTS setting AUDIT(USER) and SAUDIT enabled.
This alert uses the system-level attributes of the user ID as they are defined in the RACF database at the time of the environment refresh. No alert is generated if a command sets the value of the attribute to the one that is obtained at the time of the environment refresh.
The email format of the alert is:
The text message format of the alert is:
The report shows the removed authority, the user whose authority is removed, the complete RACF® command, and the result of the command. In addition, it shows the user that performed the RACF command.
Related Information
[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPLQS","label":"IBM Security zSecure Alert"},"ARM Category":[{"code":"a8m0z000000GoZHAA0","label":"zSecure Alert-\u003EDocumentation"}],"Platform":[{"code":"PF035","label":"z\/OS"}],"Version":"2.5.0"}]
Was this topic helpful?
Document Information
Modified date:
08 December 2021
UID
ibm16524650