[Security400] "Not authorized to command XXXXXXXX"

["Bale, Dan" <D.Bale@xxxxxxxxxxxxx>]

This is a multi-part message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
O.K., next one:

How about when I come across a situation where the admin is unable to
run a given command, say STRHOSTSVR (we had this over the weekend), the
message says
 Message . . . . :   Not authorized to command STRHOSTSVR in library
*LIBL.
 Cause . . . . . :   An attempt was made to access a command without
   adequate authority.

 Recovery  . . . :   Obtain authority from the security officer or the
   command owner, and then try the command again.


In this scenario, I would simply like to look up STRHOSTSVR somewhere,
and have the reference tell me what I need to do to enable this admin to
use the command.  So I go to the OS/400 Security Reference, do a search
on STRHOSTSVR and get two hits.  First hit tells me that this command is
shipped with public authority *EXCLUDE.  And "The security officer can
grant *USE authority to others."  The second hit tells me that QSECOFR,
QPGMR, QSYSOPR, QSRV, QSRVBAS are authorized to this command.

Am I correct that I can give the group profile for admins *USE authority
to the STRHOSTSVR command to solve our dilemna?  Or is there something
else that needs to be done?

Dan Bale
IT - AS/400
Handleman Company
248-362-4400  Ext. 4952
D.Bale@Handleman.com
  Quiquid latine dictum sit altum viditur.
  (Whatever is said in Latin seems profound.)