Receiving "TSS7208E-Volume volser not authorized for dataset creation" for non-SMS managed volumes.

Document ID : KB000026068
Last Modified Date : 14/02/2018
Show Technical Document Details

Question:

When accessing non-SMS managed volumes, the following security violation is received:

TSS7208E-Volume volser not authorized for dataset creation

when allocating a dataset.

We do not want any volume checking. This message doesn't occur with SMS managed volumes. How do we turn off volume checking?

Answer:

Issue the following to remove volume checking:

TSS ADD(msca) VOLUME(*ALL*(G)) (skip if this command was previously done)
TSS PER(ALL) VOLUME(*ALL*(G)) ACCESS(CREATE).

This will cause CA Top Secret to allow all users access to all volumes, but still perform dataset security checking.

For SMS managed volumes, SMS does not pass the volume on the dataset call, so CA Top Secret does not do any volume checking in this case.

Additional Information:

Please refer to the CA Top Secret Command Function Guide for more details about the TSS ADD and TSS PERMIT command.
Please refer to the CA Top Secret User Guide for more details about securing VOLUMEs.