My goal is change the domain parameter on the NetServer configuration, which requires the *IOSYSCFG authority. What do you suggest?
The problem here is simply that a profile cannot grant any special authority that it doesn't already have. If you don't have *IOSYSCFG, you can't grant *IOSYSCFG to any other profile, not even to yourself (especially to yourself). You must sign on with a profile that has *IOSYSCFG as well as any necessary special authorities such as *SECADM and authority to the profile that will be changed, before adding *IOSYSCFG to the desired profile.
In this case, you'll have to gain access to the QSECOFR, or other similarly endowed profile, in order to grant yourself *IOSYSCFG.
MORE INFORMATION ON THIS TOPIC
The Best Web Links: tips, tutorials and more.
Search400's targeted search engine: Get relevant information on security.
Ask your systems management questions--or help out your peers by answering them--in our live discussion forums.
Check out this Search400.com Featured Topic: Top ten security tips
Dig Deeper on iSeries system and application security
Related Q&A from Carol Woodbury
Before changing password levels and upgrading operating systems on the AS/400, ensure the clients connecting to the NetServer do not need the old ... Continue Reading
Look in the audit journal (QAUDJRN) on the AS/400 for an authority failure message with the name of the library as the object name. Use the ... Continue Reading
When error messages arise concerning attempts to use a permanent system object without authority, find the source of the issue by looking for an AF ... Continue Reading