Sysview/DB2 security error DBG043E

Document ID : KB000073232
Last Modified Date : 15/03/2018
Show Technical Document Details
Introduction:
Received the following error: DBG0A5I DBG550A5I Usr USERID,Grp GROUPID,Menu BATCH,CA SYSVIEW for DB2 19.0 DBG043E DBG55043E Access refused by Security In the Sysview/DB2 security file.
While trying to stop a request.
Question:
Recently we installed a new IQL request to report on IRLM lock contention. We scheduled batch jobs to stop and start the new request on a periodic basis.
The first time the batch jobs ran to stop the request, they each received the following error:
DBG0A5I DBG550A5I Usr USERID,Grp GROUPID,Menu BATCH,CA SYSVIEW for DB2 19.0
DBG043E DBG55043E Access refused by Security
In the Sysview/DB2 security file, we have this definition: (TYPE=USER,USERID,*,DBA), Does "USERID" require SYSADM authority instead of DBA authority to be able to stop and start the report requests? 
Environment:
Z/OS DB2
Answer:
For those with SYSADM set they get ALTER=ALL For user PRDDBA with DBA He gets ALTER=USER.

For ALTER=USER
From the manual:
Controls the ability of the user to STOP, FREEZE, RESET, and RESUME the requests that have already been started.
USER Specifies that the user can issue these commands only for requests that they have started.
IRLMCNT4 request which he is trying to stop he didn't start, it was started by the Datacollector.
Thus he is not allowed to do that and gets the warning message.