Granting access to traces

Trace commands, such as TRCCNN (Trace Connection) are powerful commands that should not be granted to all users who need access to other service and debug tools.

Complete the following steps to limit who can access these trace commands without having *SERVICE authority:

In System i® Navigator, open Users and Groups.
Select All Users to view a list of user profiles.
Right-click the user profile to be altered.
Select Properties.
Click Capabilities.
Open the Applications tab.
Select Access for.
Select Host Applications.
Select Operating System.
Select Service.
Use the check box to grant or revoke access to trace command.

Alternatively, the Change Function Usage (CHGFCNUSG) command can be used to grant users access to the trace commands. Enter CHGFCNUSG FCNID(QIBM_SERVICE_TRACE) USER(user-profile) USAGE(*ALLOWED).