If OPERCMDS is active in RACF (or equivalent third-party security product), then the Ironstream agent user must be given access to issue certain commands. The table in Appendix A shows the resource class permissions required for the console to perform discovery commands.
An additional level of command security for the agent command console is available through the use of the FILTER CMD parameter card. (See “FILTER Parameter Card” on page 12 for details on using command filtering.)
Some discovery scripts use REXX commands to perform discovery functions. If the REXX program issues z/OS commands, it will create a console with the name EVRXCNxx, where xx is the value in the system symbol &SYSCLONE. The table in Appendix A also includes resource class permissions required for the REXX command consoles.