IBM Tivoli Composite Application Manager for Application Diagnostics, Version 7.1.0.1
z/OS: Configuration user can not read FFDC and other log files
The problem: The user who configures the data collector on z/OS is unable to read FFDC (First Failure Data Capture) and other ITCAM related log files.
The solution: The user who configures the data collector (for example, WSADMIN:WSCFG1) is different from the user under which the WAS servant address space is running (for example, ASSR1:OMVS). This address space creates log files with read/write access for the user and group, but no access for other users (u=rw,g=rw,o=X).
To allow the WSADMIN user to read the log files, either add the WSADMIN user to the OMVS group, or configure RACF (or another z/OS security facility) to run the WAS servant address space under a user that is a member of the WSCFG1 group. If other user/group names are used, modify the actions accordingly.
Do not change the log file permissions to allow all users to read the files, as they may contain sensitive information.
Parent topic:
z/OS systems