Question & Answer
Question
I am receiving message BAQR0409W when trying to list the APIs that have been deployed by executing the following z/OS Connect request: https://host:port/zosConnect/apis
The userid has been defined to the admin group that I named ZCONADM. RACF shows my userid has the correct authority to that group. When I look at the trace, just before I get the not authorized error it shows:
[1/25/18 16:15:45:350 GMT] 00000042 id=6d26967e com.ibm.ws.security.registry.internal.UserRegistryWrapper < getGroupsForUser Exit [TESTGRP1, TESTGRP2, TESTGRP3]
Trace doesn't list the ZCONADM as a group. Is this causing the BAQR0409W message?
Answer
Ensure that there is an OMS segment for the RACF group that is being used. In this case, ZCONADM needs to have an OMVS segment.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSNPJM","label":"IBM z\/OS Connect"},"Platform":[{"code":"PF035","label":"z\/OS"}],"Component":"","Version":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]
Product Synonym
zCEE
Was this topic helpful?
Document Information
Modified date:
14 February 2023
UID
dwa1428772