IBM i Global

IBM i 

A space for professionals working with IBM’s integrated OS for Power systems to exchange ideas, ask questions, and share expertise on topics like RPG and COBOL development, application modernization, open source integration, system administration, and business continuity.


#Power


#IBMi
#Power
#Operatingsystems
#Servers
 View Only

  • 1.  7.6: If someone is unable to perform something because they either do not have *IOSYSCFG, or are not in QIBM_IOSYSCFG_VIEW,what audit journal entries am I expected to see?

    Posted 06/15/26 11:27 AM

    Trying to see if I am missing anything since my 7.6 upgrade.

    If someone is unable to perform something because they either do not have *IOSYSCFG, or are not in QIBM_IOSYSCFG_VIEW,what audit journal entries am I expected to see?



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------


  • 2.  RE: 7.6: If someone is unable to perform something because they either do not have *IOSYSCFG, or are not in QIBM_IOSYSCFG_VIEW,what audit journal entries am I expected to see?

    Posted 06/16/26 08:22 AM

    Rob, have you tried Authority Collection?  I would expect it to show the "failure" then you could look in the AUDJRN for any failures.



    ------------------------------
    Bryan Dietz
    ------------------------------



  • 3.  RE: 7.6: If someone is unable to perform something because they either do not have *IOSYSCFG, or are not in QIBM_IOSYSCFG_VIEW,what audit journal entries am I expected to see?

    Posted 06/16/26 08:40 AM
    Edited by Robert Berendt 06/16/26 08:42 AM

    For some reason IBM put the QIBM_IOSYSCFG_VIEW exceptions not as an AF - Authority Failure, but as a GR - General purpose audit Record.

    I figured this out with the following:

    CRTUSRPRF USRPRF(DUMMY) PASSWORD(redacted)
    Special authorities granted *NONE.
    User profile DUMMY created.       
    ...
    Sign on as DUMMY
    > wrkdevd *all                                                         
      *IOSYSCFG or access to QIBM_IOSYSCFG_VIEW function ID required to use
        WRKDEVD.                                                           
    > CHGJOB RUNPTY(10)                                                    
      621403/DUMMY/ROBS1 not authorized to change parameters.    Job control (*JOBCTL) special authority is required
    ...
    Go back to me and check audit journal
    DSPJRN JRN(QAUDJRN) FROMTIME(061626 0830) JOB(621403/DUMMY/ROBS1)
    Sequence  Code  Type
      474919   T     ZC 
      475240   T     GR 
      475251   T     AF 
     
    Sequence . . . . . . :   475240                           
    Code . . . . . . . . :   T  - Audit trail entry           
    Type . . . . . . . . :   GR - General purpose audit record
    QIBM_IOSYSCFG_VIEW was in the Entry specific data.
     
    Sequence . . . . . . :   475251                
    Code . . . . . . . . :   T  - Audit trail entry
    Type . . . . . . . . :   AF - Authority failure
    CHGJOB    *N        *CMD was in the Entry specific data.



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------



  • 4.  RE: 7.6: If someone is unable to perform something because they either do not have *IOSYSCFG, or are not in QIBM_IOSYSCFG_VIEW,what audit journal entries am I expected to see?

    Posted 06/16/26 08:45 AM

    ... then I went and checked the case I have opened up on it and they confirmed it

    We asked our developers about this, they explained that in 7.6, it won't be AF-K entries that are sent, it is GR-F entries which are for function usage:



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------

    Original Message


  • 5.  RE: 7.6: If someone is unable to perform something because they either do not have *IOSYSCFG, or are not in QIBM_IOSYSCFG_VIEW,what audit journal entries am I expected to see?

    Posted 06/22/26 03:43 AM

    Hi , check the V7R6M0 Memo to Use DOC about QIBM_IOSYSCFG_VIEW changes.

    You can find several changes and suggestion how to use at this OS level. 

    https://www.ibm.com/docs/en/ssw_ibm_i_76/pdf/rzaq9.pdf

    Have a good day. 



    ------------------------------
    Luca Maurizio Verzicco
    IBMi Service and PreSales Manager
    S2E - Solution to Enterprise
    Milano - Italy
    +39 380 6570039
    ------------------------------



  • 6.  RE: 7.6: If someone is unable to perform something because they either do not have *IOSYSCFG, or are not in QIBM_IOSYSCFG_VIEW,what audit journal entries am I expected to see?
    Best Answer

    Posted 06/22/26 03:44 AM

    https://www.ibm.com/support/pages/ibm-i-iosyscfg-audit-failures-version-76 

    Related to AUDIT issues. 



    ------------------------------
    Luca Maurizio Verzicco
    IBMi Service and PreSales Manager
    S2E - Solution to Enterprise
    Milano - Italy
    +39 380 6570039
    ------------------------------

    Original Message


  • 7.  RE: 7.6: If someone is unable to perform something because they either do not have *IOSYSCFG, or are not in QIBM_IOSYSCFG_VIEW,what audit journal entries am I expected to see?

    Posted 06/22/26 07:17 AM

    And that directly addresses "Best practices".  Thank you for the link at https://www.ibm.com/support/pages/ibm-i-iosyscfg-audit-failures-version-76 



    ------------------------------
    Robert Berendt IBMChampion
    Business Systems Analyst, Lead
    Dekko
    Fort Wayne
    ------------------------------

    Original Message


Related Content