RE: What IBM commands/programs require *SECADM?

Bonnie,

There are two answers - The first is less exact than the second.
Generally you need *SECADM Special Authority when you are working with
User Profiles. This would be the obvious commands such as CRTUSRPRF
CHGUSRPRF, DLTUSRPRF, etc. as well as less obvious profile manipulations
such as restoring a program that adopts authority, or working with
Directory Entries.

The more accurate (and longer) answer is look in Appendix D of the
Security Reference Guide and see all of the commands that require
*SECADM Special authority (I only got 88 hits in the whole book when I
searched on the phrase '*SECADM').

jte

--
John Earl
The PowerTech Group, Inc.
Direct: 253-479-1408
Mobile: 206-669-3336

www.powertech.com

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Bonnie Lokenvitz
Sent: Tuesday, December 16, 2008 11:47 AM
To: Midrange Systems Technical Discussion
Subject: What IBM commands/programs require *SECADM?

Other the the obvious user profile commands, is there some
place I can see what IBM commands or programs may require
*SECDAM authority?

Our ERP vendor has added *SECADM to the *ALLOBJ, *IOSYSCFG, *SAVSYS,
*JOBCTL, and *SPLCTL authority requirements for applying a
fix. Or we
have granted the install profile authority to a list specific
commands like RSTLIB, etc. The installation functions do not
create profiles.

Thank you,
Bonnie Lokenvitz

--
This is the Midrange Systems Technical Discussion
(MIDRANGE-L) mailing list To post a message email:
MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change
list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting,
please take a moment to review the archives at
http://archive.midrange.com/midrange-l.