Add function to MQ to listen to ENF71 signal from TAMZ product(Broadcom)

We are using TAMZ product to elevate our ID's to gain higher access during a production issue or during the normal QMGR build process. The process of elevation is as below

1.Elevate our normal TSO ID to the EPV group ID which has access to DEFINE/ALTER MQ objects and this elevation is done by TAMZ product

2.Once elevation is complete, MQ admins will perform the task for DEFINE and ALTER etc.

The issue is as below

==================

If MQ admin does not elevate his/her ID and tries to DEFINE/ALTER MQ object,MQ throws an error that he is not authorized to perform that action.This is perfectly fine.The issue is this error is cached for a very long period of time(months) and hence keeps giving the error until we issue RVERFIY SECURITY(user id) command against that MQ qmgr.

This is because MQ is not listening to ENF71 signal from TAMZ.

Please find below the link to Broadcom’s documentation that gives a bit of history of ENF71 usage by IBM and RACF/ACF2. It also points to CICS and DB2 explicitly as listeners for these events.

https://knowledge.broadcom.com/external/article/29123/acf2-support-ibm-enf-signaling-process-t.html

We understand from IBM case-TS008006688 that MQ does not have this function (to listen to ENF71 signal from TAMZ) currently and as per IBM recommendation from the above case as well as call with IBM advocates(rhys.francis@uk.ibm.com), we are raising this RFE to add the function to MQ.