MainframeKit

S913

Security authorization failure on OPENSYSTEM ABEND

The job was not authorized to open a data set in the way it asked. RACF or another security product refused the access.

MOST LIKELY

The job's user ID has no access, or only READ, to the data set.

FIRST CHECK

Read ICH408I to see the user ID, data set, access wanted and access allowed.

TRY IT ▸

JCL checker

What it means

Abend 913 means the security check at OPEN failed. For non-VSAM data sets it comes with message IEC150I, typically 913-38, and the security product issues its own message (ICH408I with RACF) showing the user, the data set and the access requested.

For example, a job asked for UPDATE access while its user ID only has READ. The system is working as designed; access needs to be granted or the job changed.

Typical causes

  • The job's user ID has no access, or only READ, to the data set.
  • The job opens a data set for output or update when it only needs input.
  • The job runs under a different user ID than expected.
  • A new data set or profile was created without the right access list.

How to fix it

  1. Read ICH408I to see the user ID, data set, access wanted and access allowed.
  2. Check whether the job really needs that level of access.
  3. Ask the security team to grant the right access through the normal process.
  4. Check the job's user ID if it differs from what you expected.
  5. Rerun after access is in place.

Example

Illustrative only; names and values are invented.

ICH408I USER(USER01  ) GROUP(BATCH   ) NAME(BATCH USER          )
  USER01.PAY.MASTER CL(DATASET ) VOL(VOL001)
  INSUFFICIENT ACCESS AUTHORITY
IEC150I 913-38,modname,PAYJOB01,STEP020,MASTER,0A21,VOL001,USER01.PAY.MASTER