IXG033E
USER DOES NOT HAVE SAF AUTHORIZATION TO PERFORM THE request REQUEST

Explanation

The Inventory DEFINE, DELETE, UPDATE, LIST or REPORT(YES) request failed because the user did not have the required SAF authorization. Access to the following RESOURCES and CLASSES are required:
  • Defining/deleting a structure entry:
    • Alter access to CLASS(FACILITY) RESOURCE(MVSADMIN.LOGR)
  • Defining/updating/deleting a log stream entry:
    • Alter access to CLASS(LOGSTRM) RESOURCE(your.log stream)
    • Update access to CLASS(FACILITY) RESOURCE(IXLSTR.your_structure) if STRUCTNAME is specified on the log stream definition, or if the structure name was extracted from the log stream named on the LIKE parameter
    • Update access to CLASS(FACILITY) RESOURCE(IXGZAWARE_CLIENT) if ZAI(YES) is specified on the log stream definition.
  • Reporting or List option:
    • Read access to CLASS(FACILITY) RESOURCE(MVSADMIN.LOGR)
In the message text:
request
One of the following:
DEFINE
A DEFINE log stream or DEFINE Structure request.
DELETE
A DELETE log stream or DELETE Structure request.
UPDATE
A UPDATE log stream request.
LIST
A LIST log stream or LIST Structure request.
REPORT
A REPORT(YES) request.

System action

The Inventory request is not performed.

Operator response

Contact the system programmer.

System programmer response

Logger messages IXG002E and IXG003I accompany IXG033E and provide additional diagnostic data. Message IXG002E will contain return code X'08' reason code X'80D'. Logger returns in IXG003I information about the error in the diagnostic fields, mapped by IXGANSAA. Investigate the meaning of DIAG1, DIAG2 and DIAG4. DIAG1 contains the RACF® or installation exit return code from the RACROUTE REQUEST=AUTH macro. DIAG2 contains the RACF or installation exit reason code from the RACROUTE REQUEST=AUTH macro. DIAG4 contains the SAF return code from the RACROUTE REQUEST=AUTH macro. See z/OS Security Server RACROUTE Macro Referencefor information about the RACROUTE macro.

Ensure that the userid associated with the Inventory request has the required SAF authorization to perform the request and submit the Inventory request again.

User response

None.

Programmer response

None.

Source

System logger (SCLOG)

Module

MANY

Routing code

-

Descriptor code

-