In some cases, due to the way the authorization checks are done, a new  user to Release 8 may not see an option that previously appeared on their Option Menu.  Users are only shown options on the dynamic option menu they are authorized to use.

 Alternately, the MENUADD command as described in solution 2 below can be used to restore missing commands.

If IBMSAF=YES is specified in options member A60ACF, the IBM defined SAF profile is  checked first. If the answer from SAF is ambivalent (or IBMSAF=NO is specified), then the ALLOW macro(s) are checked.

For example, when IBMSAF=NO is specified, the table below shows that members of the SYSPROG group will see the APPC, CMDS, ENC, MAS, PS, and RM commands on the Option Menu if the following ALLOW macro is present:

       ALLOW  1,0,SYSTEMS,*,GROUP=SYSPROG

When an option is not displayed on the IOF Option Menu, specifying that option results in a COMMAND error.

Note that CHK is an alias for CK and NOD is an alias for NODE.  Current releases omitted the CHK and NOD aliases from AUTH, AUTHADD and AUTHREM commands.

SAF checks specified in the B24ACFDF option can be used to cause options to be displayed on the user's menu.  Assume for example the following is specified in B24ACFDF:

       ACFDEF  IOFACF,              IOF Resource prefix                *
               CLASS=DATASET,       Resource class for IOF resources   *
               JOBS=COMBO,          Chk jobs by owner and jobname      *
               GROUPS=NONE,         No ACF output group control        *
               DEVICES=COMBO,       Chk devices by type and name       *
               CMDS=YES,            Chk commands by type, cmd, parm    *
               ENCLAVES=YES,        Chk enclaves                       *
               PROCESS=YES,         Chk process                        *
               SYSTEMS=YES,         Chk systems functions              *
               CHECKS=YES,       8B Chk Health Checker                 *
               SCHENV=YES,       8B Chk Scheduling environmen          *
               SCHRES=YES,       8B Chk WLM resources                  *
               JOBCLASS=YES,     8C Chk Job Classes by class           *
               VOLUMES=YES,      8C Chk Spool Volumes by volume name   *
               NODES=YES,        8C Chk Nodes by node name             *
               USERJOB=NO           Users can't permit to other users   

The LOG option will be displayed on the Option Menu if a user has  access to either of the profiles shown including any generic form.

Note that fixes U8A2190, U8A2206 and U8A2214 are required in order for all the allow macros and SAF resources defined below to be honored.

When the B23ALLOW option is changed, you must run the M18NEWOP job and refresh LLA in order to apply the changes.

See solution 2 below for alternate ways to override the default options displayed.

AUTHADD=(I,R,...) specifies options that should be added to the default options for the group.

AUTHREM=(I,R,...) specifies options that shoule be removed from the default options for the group.

AUTH=(I,R,...) specifies the exact options that should be displayed for the group of users.

These macros list the specific options to be shown, added or removed in the AUTH, AUTHADD or AUTHREM parm. Options can be specified include:

   I   - Input jobs
   R   - Running jobs
   O   - Output jobs
   J   - Jobs menu
   G   - Output Groups
   H   - Held Groups
   M   - System Monitor
   P   - IOF Profile
  LOG  - System Log
  SR   - System Req
  DEV  - Devices
  PR   - Printers
  PUN  - Punches
  RDR  - Readers
  LINE - Lines
  INIT - Initiators
  SO   - Offloaders
  CN   - MVS Console
  MAS  - MAS Systems
  ENC  - Enclaves
  PS   - Processes
  RM   - JES2 Monitor
  APPC - APPC menu
  CMDS - Global Cmds
      Added in Release 8B
  MORE - More Cmds (replaces CMDS)
  CHK  - Health Checker
  WLM  - Workload Manager
      Added in Release 8C 
  JBC  - Job Classes
  SPV  - Spool Volumes
  NOD  - NJE Nodes

Note that AUTH, AUTHADD and AUTHREM do not grant or restrict access to an option . The only function of these parms is to control which options are displayed on the IOF Option Menu.

AUTHADD and AUTHREM parms are preferable to the AUTH parm. Future releases of IOF will add additional options. Use of the AUTH parm will  prevent future new options from appearing on the Option Menu.

After changing the B23ALLOW option, run the M18NEWOP job and refresh LLA.