December 28

0 comments

“no authority to use System Request Functions” on IBM i Systems

By NickLitten

December 28, 2022

IBM i on Power, system request

Have you got the “no authority to use system request functions” showstopper?

If you are not authorized to see the System Request panel group (QGMNSYSR) you will see this error:

CPD2317 - No authority to use system request functions.
Cause . . . :   You tried to use the system request functions, but you do not have the authority to do so.  To use system request functions, you must have authority to use the panel group QGMNSYSR. 

How to Enable/Disable SysReq Menu Access

The SYS/RQ function is controlled by the IBM Panel Group called QGMNSYSR. This lives in the QSYS library and this panel group if the key to allowing users access to the System Request function.

Press the SYSTEM REQUEST Key combination (Shift Escape) to see the menu:

Ibm i system request menu
IBM i System Request Menu

Typically, we might use Sys/Req/3 to see the DSPJOB function:

Ibm i system request menu dspjob

To block all standard users from accessing the System Request function, we can set *PUBLIC for the Panel Group to *EXCLUDE.

GRTOBJAUT OBJ(QSYS/QGMNSYSR) OBJTYPE(*PNLGRP) USER(*PUBLIC) AUT(*EXCLUDE)

If you want to grant access to all users on the system you could grant *PUBLIC access like this:

GRTOBJAUT OBJ(QSYS/QGMNSYSR) OBJTYPE(*PNLGRP) USER(*PUBLIC) AUT(*USE)

Having said that – I would recommend granting access to a specific users group – which is assigned to the users that need access to the System Request functions:

GRTOBJAUT OBJ(QSYS/QGMNSYSR) OBJTYPE(*PNLGRP) USER(USERGROUP) AUT(*USE)

In this example USERGROUP is the *GRPPRF name that your users would need as a supplemental group on their profiles.

How about changing one of the System Request Menu options?

{"email":"Email address invalid","url":"Website address invalid","required":"Required field missing"}

Join the IBM i Community for FREE Presentations, Lessons, Hints and Tips

>