I have set up sensitive resources to send alerts on accesses to certain datasets. This is working as expected, but we are getting too many alerts and I'd like to pare it down by excluding privileged users. In my SENSREAD member I've coded some userids to test with in the format below:

----+----1----+----2----+----3----+----4----+----5-

USER01   DATASET  *

USER02   DATASET  A.B.C.*

USER03   DATASET  A.B.C.D

This is just an example, of course. My real statements just aren't working and seem to be ignored completely. When I make the change to the member I perform a verify and refresh of the configuration. I still receive alerts when the privileged users touch the sensitive datasets. Any ideas on how I can debug this problem?

With IBM support help, it was discovered that I had statements in the wrong columns -- they are positional, my example statements above are actually in the correct positions but in my actual test case they were not. After correcting the statements it is now working.

Glad to see IBM Support got you out of this bind.  The layout of SENSxxxx members is described here.

------------------------------
Rob van Hoboken
------------------------------