Note on the ICH408I messages

Message ICH408I is a set of messages that are displayed in multiple lines.

The first line of an ICH408I message identifies a user or job that had an authorization problem. The other lines of the messages (shown in this document following the explanation of USER or JOB) describe the request the user of job was issuing and the reason for the failure.

ICH408I USER(SMITH   ) GROUP(DEPT60 ) NAME(R.L.SMITH     )
ICH408I   DEPT58.CLIST.CNTL CL(DATASET ) VOL(TSO035)
ICH408I   INSUFFICIENT ACCESS AUTHORITY
ICH408I   FROM DEPT58.CLIST.* (G)
ICH408I   ACCESS INTENT(READ    )  ACCESS ALLOWED(NONE   )

This message can be interpreted as:

User SMITH, a member of group DEPT60, whose name is R.L.SMITH, had INSUFFICIENT ACCESS AUTHORITY to resource DEPT58.CLIST.CNTL, which is in class DATASET and resides on volume TSO035.

The RACF® profile protecting the resource is DEPT58.CLIST.*, and it is a generic profile.

The access attempted by SMITH was READ, and the access allowed by RACF was NONE.

Each set of ICH408I messages contains at least one line that describes the reason for failure, typically in the 2nd or 3rd line. Each line of reason for failure is listed and described in alphabetic order in this RACF Processing Messages section.