fail to submit jobs

Document ID : KB000113340
Last Modified Date : 07/09/2018
Show Technical Document Details
Issue:
After new TSS is installed, we fail to submit jobs. We get these errors:

USER NOT AUTHORIZED FOR SUB+
YOUR TSO ADMINISTRATOR MUST AUTHORIZE USE OF THIS COMMAND

These messages are from TSO, not from CA Top secret.

The user who tried to submit looks like this below:

ACCESSORID = TLVAL NAME = AVNER
TYPE = CENTRAL SIZE = 1280 BYTES
FACILITY = TSO
CREATED = 09/02/18 16:09 LAST MOD = 09/04/18 13:09
ATTRIBUTES = CONSOLE
LAST USED = 09/04/18 11:10 CPU(TLVC) FAC(TSO ) COUNT(00003)
JESSPOOL = SPC
JESJOBS = CANCEL. SUBMIT.
OPERCMDS = JESX.CANCEL JESX.DISPLAY
OPERCMDS = JESX.STOP JES2.
OPERCMDS = JES3. MVS.
SDSF = ISFATTR. ISFCMD.
SDSF = ISFINIT.
XA SDSF = ISF.CONNECT OWNER(MSCA )
 ACCESS = READ
XA TSOPROC = SYSLOGON OWNER(SYSDEPT )
----------- SEGMENT OMVS
HOME = / OMVSPGM = /BIN/SH
UID = 0000000000
----------- SEGMENT TSO
TRBA = **NON-DISPLAY FIELD**
TSOCOMMAND =
TSODEFPRFG =
TSOLACCT =
TSOLPROC = SYSLOGON
TSOLSIZE = 0000000
TSOOPT = MAIL,NOTICES,NOOIDCARD
TSOUDATA = 0000
TUPT = **NON-DISPLAY FIELD**
----------- ADMINISTRATION AUTHORITIES
RESOURCE = *ALL*
 ACCESS = ALL
ACID = *ALL*
FACILITIES = *ALL*
LIST DATA = *ALL*,PROFILES,PASSWORD,PWVIEW,SESSKEY
MISC1 = *ALL*
MISC2 = *ALL*
MISC3 = *ALL*
MISC8 = *ALL*
MISC9 = *ALL*
TSS0300I LIST FUNCTION SUCCESSFUL
Environment:
z/OS
Resolution:
This user was missing to have the TSO authorization to submit job from TSO.

A permit as it follows, is needed:

TSS PER(acid#) TSOAUTH(JCL)
Additional Information:

Go to the link below to have more details about TSOAUTH class within CA Top secret:

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/using/issuing-commands-to-communicate-administrative-requirements/resources/tsoauth-resource-classsecure-tso-user-attributes

Go to the link below to have more information about TSO resources with CA Top secret:

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/implementing-in-cics-and-other-interfaces/implementing-security-for-tso/uads-replacement/tso-related-resources