Commands shipped with public authority *EXCLUDE

This section identifies which commands have restricted authorization (public authority is *EXCLUDE) when your system is shipped. It shows which IBM-supplied user profiles are authorized to use these restricted commands.

For more information about IBM-supplied user profiles, see the topic IBM-supplied user profiles.

In Table 1, commands that are specifically authorized to one or more IBM-supplied user profiles, in addition to the security officer, have an S under the profile names for which they are authorized.

Any commands not listed here are public, which means they can be used by all users. However, some commands require special authority, such as *SERVICE or *JOBCTL. The special authorities required for a command are listed in Authority required for objects used by commands.

If you choose to grant other users or the public *USE authority to these commands, update this table to indicate that which commands are no longer restricted on your system. Using some commands might require the authority to certain objects on the system as well as to the commands themselves. See Authority required for objects used by commands for the object authorities required for commands.

Note: Proxy Commands
  • The commands listed in table Table 1 are shipped by IBM with public authority of *EXCLUDE. If you notice on your system that the public authority of a command listed in this table shows a value of *USE and is in the QSYS library then this command might be a proxy command. Proxy commands are shipped by IBM in the QSYS library and have public authority of *USE. It is the actual command in the product library that will have public authority of *EXCLUDE (unless the public authority has been changed by an authorized user of your system). Authority to the proxy command is checked by the system as well as authority to the actual target command in the product library.
  • To determine if the command is a proxy command, run the DSPOBJD command specifying the command name in library QSYS on the DSPOBJD OBJ parameter. If the command is a proxy command it will show an attribute value of PRX. To determine the authority of the actual target command in the product library, first use the DSPCMD command on the proxy command in the QSYS library. This will show you the current proxy chain. Then, use the DSPOBJAUT command and specify the library qualified command name of the last target command in the current proxy chain. This will show you the authority on the actual command in the product library.
Table 1. Authorities of IBM-supplied user profiles to restricted commands
Command Name QPGMR QSYSOPR QSRV QSRVBAS
ADDASPCPYD        
ADDCADMRE        
ADDCADNODE        
ADDCLUMON        
ADDCLUNODE        
ADDCMDCRQA S S S S
ADDCRGDEVE        
ADDCRGNODE        
ADDCRSDMNK        
ADDDEVDMNE        
Start of changeADDDIRINSTEnd of change        
ADDDSTQ S S    
ADDDSTRTE S S    
ADDDSTSYSN S S    
ADDEXITPGM        
ADDDWDFN        
Start of changeADDHYSSTGDEnd of change        
ADDJWDFN        
ADDMFS        
ADDMSTPART        
ADDNETJOBE        
ADDOBJCRQA S S S S
ADDOPTCTG        
ADDOPTSVR        
ADDPEXDFN S   S  
ADDPEXFTR S   S  
ADDPRDCRQA S S S S
ADDPTFCRQA S S S S
ADDRPYLE S      
ADDRSCCRQA S S S S
Start of changeADDSVCCPYDEnd of change        
ADDTRCFTR        
Start of changeADDWLCGRPEnd of change        
Start of changeADDWLCPRDEEnd of change        
ANSQST        
ANZCMDPFR        
ANZDBF        
ANZDBFKEY        
ANZDFTPWD        
ANZJVM S S S S
ANZOBJCVN        
ANZPFRDTA        
ANZPGM        
ANZPRB S S S S
ANZPRFACT        
ANZS34OCL        
ANZS36OCL        
APYJRNCHG S   S  
APYPTF     S  
APYRMTPTF S S S S
Start of changeCFGACCWEBEnd of change        
Start of changeCFGDEVASPEnd of change        
CFGDSTSRV S S    
Start of changeCFGGEOMIREnd of change        
CFGRPDS S S    
CFGSYSSEC        
CHGACTSCDE        
CHGASPA        
CHGASPACT        
CHGASPCPYD        
CHGASPSSN        
CHGCAD        
CHGCLU        
CHGCLUCFG        
CHGCLUMON        
CHGCLUNODE        
CHGCLURCY        
CHGCLUVER        
CHGCMDCRQA S S S S
CHGCRG        
CHGCRGDEVE        
CHGCRGPRI        
CHGCRSDMNK        
CHGDIRSRVA        
CHGDSTQ S S    
CHGDSTRTE S S    
CHGEXPSCDE        
CHGFCNARA        
CHGGPHFMT        
CHGGPHPKG        
Start of changeCHGHYSSTGDEnd of change        
Start of changeCHGHYSSTSEnd of change        
CHGJOBTRC        
CHGJOBTYP        
CHGJRN S S S  
CHGJRNA S S    
CHGLICINF        
CHGMGDSYSA S S S S
CHGMGRSRVA S S S S
CHGMSTK        
CHGNETA        
CHGNETJOBE        
CHGNFSEXP        
CHGNWSA        
CHGNWSCFG        
CHGOBJCRQA S S S S
CHGOPTA        
CHGPEXDFN S   S  
CHGPRB S S S S
CHGPRDCRQA S S S S
CHGPTFCRQA S S S S
CHGPTR     S  
CHGQSTDB        
CHGRCYAP S S    
CHGRPYLE S      
CHGRSCCRQA S S S S
Start of changeCHGSVCCPYDEnd of change        
Start of changeCHGSVCSSNEnd of change        
CHGSYSLIBL        
CHGSYSVAL S S S  
CHGS34LIBM        
Start of changeCHGWLCGRPEnd of change        
CHKASPBAL        
CHKCMNTRC     S  
CHKMSTKVV        
CHKPRDOPT S S S S
CLRMSTKEY        
CPHDTA        
CPYFCNARA        
CPYFRMLDIF        
Start of changeCPYFRMMSDEnd of change        
CPYGPHFMT        
CPYGPHPKG        
CPYPFRCOL        
CPYPFRDTA        
CPYPTF S S S S
CPYPTFGRP S S S S
CPYTOLDIF        
Start of changeCPYTOMSDEnd of change        
CRTADMDMN        
CRTAUTHLR        
CRTCAD        
CRTCLS        
CRTCLS        
CRTCLU        
CRTCRG        
CRTFCNARA        
CRTGPHFMT        
CRTGPHPKG        
CRTHSTDTA        
CRTJOBD        
CRTNWSCFG        
CRTPFRDTA        
CRTPFRSUM        
CRTLASREP S      
CRTPEXDTA S   S  
CRTQSTDB        
CRTQSTLOD        
CRTSBSD S S    
CRTUDFS        
CRTUDFS        
CRTVLDL        
CVTBASSTR        
CVTBASUNF        
CVTBGUDTA        
CVTDIR        
CVTPFRCOL        
CVTPFRDTA        
CVTPFRTHD        
CVTS36FCT        
CVTS36JOB        
CVTS38JOB        
CVTTCPCL S S S S
DB2LDIF        
DLTADMDMN        
DLTAPARDTA S S S S
DLTCAD        
DLTCLU        
DLTCMNTRC     S  
DLTCRGCLU        
DLTEXPSPLF        
DLTFCNARA        
DLTGPHFMT        
DLTGPHPKG        
DLTHSTDTA        
DLTINTSVR        
DLTLICPGM        
DLTNWSCFG        
DLTPEXDTA S   S  
DLTPFRCOL        
DLTPFRDTA        
DLTPRB S S S S
DLTPTF S S S S
DLTQST        
DLTQSTDB        
DLTRMTPTF S S S S
DLTSMGOBJ S S S S
DLTUDFS        
DLTVLDL        
DLTWNTSVR        
DMPDLO S S S S
DMPJOB S S S S
DMPJOBINT S S S S
DMPJVM S S S S
DMPMEMINF        
DMPOBJ     S S
DMPSYSOBJ S S S S
DMPTRC S   S  
DMPUSRPRF        
DSPASPCPYD        
DSPASPSSN        
DSPCLUINF        
DSPCRGINF        
DSPDSTLOG        
DSPHSTGPH        
Start of changeDSPHYSSTGDEnd of change        
Start of changeDSPHYSSTSEnd of change        
DSPMGDSYSA S S S S
DSPNWSCFG        
DSPPFRDTA        
DSPPFRGPH        
DSPPTF S S S S
Start of changeDSPPTFAPYIEnd of change Start of changeSEnd of change Start of changeSEnd of change Start of changeSEnd of change Start of changeSEnd of change
DSPSRVSTS S S S S
Start of changeDSPSVCCPYDEnd of change        
Start of changeDSPSVCSSNEnd of change        
Start of changeDSPWLCGRPEnd of change        
EDTCPCST   S    
EDTQST        
EDTRBDAP   S    
EDTRCYAP S S    
ENCCPHK        
ENCFRMMSTK        
ENCTOMSTK        
Start of changeENDACCWEBEnd of change        
ENDASPBAL        
ENDASPSSN        
ENDCAD        
ENDCHTSVR        
ENDCLUNOD        
ENDCMNTRC     S  
ENDCRG        
ENDDBGSVR S S S S
ENDDW        
ENDHOSTSVR S S S S
ENDIDXMON        
ENDIPSIFC S S S S
ENDJOBABN S S S  
ENDJOBTRC        
ENDJW        
ENDMGDSYS S S S S
ENDMGRSRV S S S S
ENDMSF   S S S
ENDNFSSVR   S S S
ENDPEX S   S  
ENDPFRTRC     S  
ENDSRVJOB S S S S
Start of changeENDSVCSSNEnd of change        
ENDSYSMGR S S S S
ENDTCP S S S S
ENDTCPCNN S S S S
ENDTCPIFC S S S S
ENDTCPSVR S S S S
ENDWCH        
GENCPHK        
GENCRSDMNK        
GENMAC        
GENPIN        
GENS36RPT        
GENS38RPT        
GRTACCAUT        
HLDCMNDEV S S S S
HLDDSTQ S S    
INSINTSVR        
INSPTF2     S  
INSRMTPRD S S S S
INSWNTSVR        
INZDSTQ S S    
INZNWSCFG        
INZSYS        
LDIF2DB        
LODOPTFMW        
LODPTF     S  
LODQSTDB        
MGRS36        
MGRS36APF        
MGRS36CBL        
MGRS36DFU        
MGRS36DSPF        
MGRS36ITM        
MGRS36LIB        
MGRS36MNU        
MGRS36MSGF        
MGRS36QRY        
MGRS36RPG        
MGRS36SEC        
MGRS38OBJ        
MIGRATE        
PKGPRDDST S S S S
PRTACTRPT        
PRTCMNTRC     S  
PRTCPTRPT        
PRTJOBRPT        
PRTJOBTRC        
PRTLCKRPT        
PRTPOLRPT        
PRTRSCRPT        
PRTSYSRPT        
PRTTNSRPT        
PRTTRCRPT        
PRTDSKINF        
PRTERRLOG S S S S
PRTINTDTA S S S S
PRTPRFINT        
PWRDWNSYS   S    
Start of changeRCLAPPNEnd of change        
RCLDBXREF        
RCLOBJOWN        
RCLOPT        
RCLSPLSTG S S S S
RCLSTG S S S S
RCLTMPSTG S S S S
RESMGRNAM S S S S
RLSCMNDEV S S S S
RLSDSTQ S S    
RLSIFSLCK        
RLSRMTPHS S S    
RMVACC        
Start of changeRMVACCWEBEnd of change        
RMVASPCPYD        
RMVCADMRE        
RMVCADNODE        
RMVCLUMON        
RMVCLUNODE        
RMVCRGDEVE        
RMVCRGNODE        
RMVCRSDMNK        
RMVDEVDMNE        
RMVDFRID        
Start of changeRMVDIRINSTEnd of change        
RMVDSTQ S S    
RMVDSTRTE S S    
RMVDSTSYSN S S    
RMVDWDFN        
RMVEXITPGM        
Start of changeRMVHYSSTGDEnd of change        
RMVJRNCHG S   S  
RMVJWDFN        
RMVLANADP        
RMVMFS        
RMVNETJOBE        
RMVOPTCTG        
RMVOPTSVR        
RMVPEXDFN S   S  
RMVPEXFTR S   S  
RMVPTF     S  
RMVRMTPTF S S S S
RMVRPYLE S      
Start of changeRMVSVCCPYDEnd of change        
RMVTRCFTR        
Start of changeRMVWLCGRPEnd of change        
Start of changeRMVWLCPRDEEnd of change        
RSTAUT        
RST3        
RSTCFG        
RSTDFROBJ        
RSTDLO        
RSTLIB        
RSTLICPGM        
RSTOBJ3        
RSTPFRCOL        
RSTPFRDTA        
RSTS36F        
RSTS36FLR        
RSTS36LIBM        
RSTS38AUT        
RSTUSRPRF        
RTVDSKINF        
RTVPRD S S S S
RTVPTF S S S S
RTVSMGOBJ S S S S
Start of changeRTVTCPINFEnd of change        
RUNLPDA S S S S
RUNSMGCMD S S S S
RUNSMGOBJ S S S S
RVKPUBAUT        
SAVAPARDTA S S S S
SAVLICPGM        
SAVPFRCOL        
SAVPFRDTA        
SAVRSTCHG        
SAVRSTLIB        
SAVRSTOBJ        
SBMFNCJOB        
SBMNWSCMD        
SETMSTK        
SETMSTKEY        
SNDDSTQ S S    
SNDPRD S S S S
SNDPTF S S S S
SNDPTFORD     S S
SNDSMGOBJ S S S S
SNDSRVRQS     S S
Start of changeSTRACCWEBEnd of change        
STRASPBAL        
STRASPSSN        
STRCAD        
STRCHTSVR        
STRCLUNOD        
STRCMNTRC     S  
STRCRG        
STRDBG S   S S
STRDBGSVR S S S S
STRDW        
STRHOSTSVR S S S S
STRIDXMON        
STRIPSIFC S S S S
STRJW        
STRJOBTRC        
STRMGDSYS S S S S
STRMGRSRV S S S S
STRMSF1   S S S
STRNFSSVR        
STRNETINS        
STROBJCVN        
STRPEX S   S  
STRPFRG        
STRPFRT        
STRPFRTRC     S  
STRRGZIDX        
STRSPLRCL        
STRSRVJOB S S S S
STRSST     S  
Start of changeSTRSVCSSNEnd of change        
STRSYSMGR S S S S
STRS36MGR        
STRS38MGR        
STRTCP S S S S
STRTCPIFC S S S S
STRTCPSVR S S S S
STRUPDIDX        
STRWCH        
TRCASPBAL        
TRCCPIC        
TRCICF        
TRCINT S   S  
TRCJOB S S S S
TRCTCPAPP     S S
TRNPIN        
UPDPTFINF        
Start of changeUPDTCPINFEnd of change        
VFYCMN S S S S
VFYLNKLPDA S S S S
VFYMSTK        
VFYPIN        
VFYPRT S S S S
VFYTAP S S S S
WRKASPCPYD        
Start of changeWRKCADMREEnd of change        
WRKCNTINF     S S
WRKDEVTBL        
WRKDPCQ S S    
WRKDSTQ S S    
WRKFCNARA        
WRKJRN S S S  
WRKLICINF        
WRKNWSCFG        
WRKPEXDFN S   S  
WRKPEXFTR S   S  
WRKPGMTBL        
WRKPRB S S S S
WRKPTFGRP S S S S
WRKPTFORD     S S
WRKSRVPVD     S S
WRKSYSACT        
WRKTRC        
WRKTXTIDX        
WRKUSRTBL        
WRKWCH        
1
The QMSF user profile is also authorized to this command.
2
QSRV can only run this command if an IPL is not being done.
3
In addition to QSYS, user profile QRDARS400 has authority.