Allowlists and compliance rules


(SPE2501)

SPM has a standard list of allowlists that are used in various compliance rules to exclude false positives.

 The following table lists the compliance rules and the allowlists used in them. You can use this list to update the allowlists as required.

Compliance report

Allowlist

CICS0003

CICS

CICS0005

CAT1, CAT2, CAT3

CR0123

CISPROPCNTL

CR0131

SECADM

CR0211

STGMGMT

CR02112

AUTHUSER, SYSPROG

CR02113

SYSPROG

CR02114

STGBATUSR, SYSPROG

CR02115

DUMPDEBUG, SYSPROG

CR02116

AUDITOR, AUTHDISA, SYSPROG

CR0212

SMFDUMP_BATCH, SYSPROG

CR0214

SYSPROG

CR0215

SYSPROG

CR0218

AUDITOR, SECADM, SYSPROG

CR0221

AUDIT, SYSPROG

CR0222

DASDADM, SYSPROG, TAPEADM

CR0224

AUDIT, DATACENTER, GENSTC, SECADM, SYSPROG

CR0225

SYSPROG

CR0226

SYSPROG

CR0227 

SYSPROG

CR0228

SYSPROG

CR0920

SYSPROG

CR0921

SYSPROG

CR0922

SYSPROG

CR095

SYSPROG

CX0125

TRUSTED_STC, ZOS_TRUSTED_STC

DA223650

SYSPROG

DA223666

BATCHJOB, SYSPROG

DA223670

STGBATUSR, SYSPROG

DA223677

AUDIT, AXRUSER, REXX_STC, SYSPROG

DA223678

SYSPROG

DA223680

SYSPROG

DA223686

AUTHDISA

DA223687

AUTHUSER, SYSPROG

DA223697

AUDIT, DATACENTER, GENSTC, SECADM, SYSPROG

DA223701

SMFDUMP_BATCH, SYSPROG

DA223722

SHAREDUSER

DA223735

AUTHUSER, SYSPROG

DA223753

AUTOOPER, CSSMTP_EXTWRT, OPERATORS, SYSPROG

DA223754

ENDUSER, OPERATORS, SYSPROG

DA223823

CSSMTPADMIN, TCPAUTHUSR, TCPFTPPROF

DA223826

SYSPROG

DA223836

AUDIT, DASD_BATCH, OPERATORS, SECADM, SYSPROG

DA223845

SYSPROG

DA223846

SYSPROG, TSOUSS

DA223849

SYSPROG

DA235034

SYSPROG

DB200002

DB2ADMIN

DB200003

DB2ADMIN

DSA108

AUDIT, DATACENTER, GENSTC, SECADM, SYSPROG

DSA109

SYSPROG

DSA110

SYSPROG

DSA111

SYSPROG

DSA112

SYSPROG

DSA113

SYSPROG

DSA114

SYSPROG

DSA115

SYSPROG

DSA116

SYSPROG

DSA117

SYSPROG

DSA118

ACPMAINT_BATCH, AUDIT, DASDBAT, SECADM, SYSPROG

DSA119

BATCHJOB, SYSPROG

DSA120

SYSPROG

DSA121 

SYSPROG

DSA122

SECADM, SYSPROG

DSA123

SMFDUMP_BATCH, SYSPROG

DSA124

AUTHDISA

DSA125

DUMPDEBUG, SYSPROG

DSA126

STGBATUSR, SYSPROG

DSA127

SYSPROG

DSA128

SYSPROG

DSA129 

SYSPROG

DSA234

AUTHUSER, SYSPROG

DSA297

AUDIT, DASD_BATCH, OPERATORS, SECADM, SYSPROG

DSA29952

FTPCC

DSA3219

CSSMTPADMIN, TCPAUTHUSR, TCPFTPPROF

DSA3221

SYSPROG

DSA3240

AUTHUSER, SYSPROG

DSA3716

SHAREDUSER

DSA3897

SYSPROG

DSA3905

MQADMIN, MQSTC, SYSPROG

DSA4850

BATCHJOB, SYSPROG

DSA6904

SYSPROG

DSA6926

AUTOOPER, CSSMTP_EXTWRT, OPERATORS, SYSPROG

DSA6928

ENDUSER, OPERATORS, SYSPROG

DSA6973

MQCMDS

DSA6974

SYSPROG

DSA6976

SYSPROG, TSOUSS

DSA6977

SYSPROG

DSA71223

AUDIT, AXRUSER, REXX_STC, SYSPROG

DSA7516

DSN, SYSPROG

DST108

AUDIT, DATACENTER, GENSTC, SECADM, SYSPROG

DST109

SYSPROG

DST110

SYSPROG

DST111

SYSPROG

DST112

SYSPROG

DST113

SYSPROG

DST114

SYSPROG

DST115

SYSPROG

DST116

SYSPROG

DST117

SYSPROG

DST118

ACPMAINT_BATCH, AUDIT, DASDBAT, SECADM, SYSPROG

DST119

BATCHJOB, SYSPROG

DST120

SYSPROG

DST121

SYSPROG

DST122

SECADM, SYSPROG

DST123

SMFDUMP_BATCH, SYSPROG

DST124

AUTHDISA

DST125

DUMPDEBUG, SYSPROG

DST126

STGBATUSR, SYSPROG

DST127

SYSPROG

DST128

SYSPROG

DST129

SYSPROG

DST234

AUTHUSER, SYSPROG

DST297

AUDIT, DASD_BATCH, OPERATORS, SECADM, SYSPROG

DST29952

FTPCC

DST3219

CSSMTPADMIN, TCPAUTHUSR, TCPFTPPROF

DST3221

SYSPROG

DST3240

AUTHUSER, SYSPROG

DST3716

SHAREDUSER

DST3895

DASDADM, SYSPROG

DST3897

SYSPROG

DST3905

MQADMIN, MQSTC, SYSPROG

DST4850

BATCHJOB, SYSPROG

DST6904

SYSPROG

DST6924

JES2

DST6926

AUTOOPER, OPERATORS, SYSPROG

DST6928

ENDUSER, OPERATORS, SYSPROG

DST6973

MQCMDS

DST6974

SYSPROG

DST6976

SYSPROG, TSOUSS

DST6977

SYSPROG

DST71223

AUDIT, AXRUSER, REXX_STC, SYSPROG

DST7516

DSN, SYSPROG

DS108

AUDIT, DATACENTER, GENSTC, SECADM, SYSPROG

DS109

SYSPROG

DS110

SYSPROG

DS111

SYSPROG

DS112

SYSPROG

DS113

SYSPROG

DS114

SYSPROG

DS115

SYSPROG

DS116

SYSPROG

DS117

SYSPROG

DS118

ACPMAINT_BATCH, AUDIT, DASDBAT, SECADM, SYSPROG

DS119

SYSPROG

DS120

SYSPROG

DS121

SYSPROG

DS122

SECADM, SYSPROG

DS123

SMFDUMP_BATCH, SYSPROG

DS124

SYSPROG

DS125

DUMPDEBUG, SYSPROG

DS126

STGBATUSR, SYSPROG

DS127

SYSPROG

DS128

SYSPROG

DS129

SYSPROG

DS17839

AUTHBATCH

DS182

AUTHUSER, SYSPROG

DS184

TSO, TSOEMER

DS223649

SYSPROG

DS223650

SYSPROG

DS223652

OPSYSFUNC, SECADM, TSOEMER

DS223654

AUTHUSER, SYSPROG

DS223655

OPERATORS, SYSADMIN, SYSPROG

DS223662

DATACENTER

DS223663

STGBATUSR, STGMGMT, SYSPROG

DS223664

V299, V299_USERID

DS223666

SYSPROG

DS223667

AUDIT, SECADM, SYSPROG

DS223668

AUDIT, BMCMV, CA1STC, CCSSTC, CICS, CTRL-O, SYSPROG

DS223669

BATCHJOB, SYSPROG

DS223670

STGBATUSR, SYSPROG

DS223671

SYSPROG

DS223672

AUTHBATCH, JOBSCHED

DS223673

JOBSCHED, MUSSAS

DS223674

SYSPROG

DS223675

SYSPROG

DS223676

SYSPROG

DS223677

AUDIT, AXRUSER, REXX_STC, SYSPROG

DS223678

SYSPROG

DS223679

SYSPROG

DS223680

SYSPROG

DS223681

DUMPDEBUG, SYSPROG

DS223682

SYSPROG

DS223683

AUDIT, DATACENTERP, SECADM, SYSPROG, SYSTEM_STC

DS223684

AUDIT, AXRUSER, SECADM, SYSPROG

DS223685

ACPMAINT_BATCH, AUDIT, DASDBAT, SECADM, SYSPROG

DS223686

SYSPROGDS223687 AUTHUSER, SYSPROG

DS223688

AUDIT, SYSPROG

DS223689

OPERSTAFF, SYSPROG

DS223690

SYSPROG

DS223691

DASDADM, SYSPROG, TAPEADM

DS223697

AUDIT, DATACENTER, GENSTC, SECADM, SYSPROG

DS223701

SMFDUMP_BATCH, SYSPROG

DS223709

AUDIT

DS223712

AUTHBATCH

DS223713

SECADM

DS223714

KEYSYS

DS223718

FTPUSERS

DS223722

SHAREDUSER

DS223732

STGMGMT

DS223735

AUTHUSER, SYSPROG

DS223747

NJEUser, OPERATORS, RJEUser

DS223749

OPERATORS, SYSPROG

DS223751

JES2

DS223752

APPDEV, APPSUP, EXTWRT, SECADM, SYSPROG

DS223753

AUTOOPER, CSSMTP_EXTWRT, OPERATORS, SYSPROG

DS223754

OPERATORS, SYSPROG

DS223755

AUTHBATCH

DS223758

SCP_USER, SFTPCLNT_USER, SFTPSERVR_USER, SMFAUTH, SSH_USER

DS223777

CLASSFILTER

DS223787

APF

DS223791

HMCSHRD, VMSHRD

DS223815

DFSMS_ENDUSR

DS223816

DASDADM, SYSPROG

DS223818

APPSUP, DASDMGR, ENDUSER, OPERATORS, SECADM, SYSPROG

DS223821

PPSM

DS223823

CSSMTPADMIN, TCPAUTHUSR, TCPFTPUSR

DS223826

SYSPROG

DS223836

AUDIT, DASDBAT, OPERATORS, SECADM, SYSPROG

DS223837

TSO, TSOEMER

DS223838

SYSPROG, SYSTEM_STC

DS223839

SECADM, SYSPROG_SUPRUSR, SYSTEM_STC, USSDAEMON, USSSERVR

DS223844

USSSERVR

DS223845

SYSPROG

DS223846

SYSPROG

DS223849

SYSPROG

DS223856

SECADM, SYSPROG

DS234

AUTHUSER, SYSPROG

DS235034

SYSPROG

DS251

CICS, LIKE, OPERATOR, SYSADM, SYSPROG

DS285

FTPUSERS

DS286

AUTHBATCH, JOBSCHED

DS28603

USS_SHRID

DS287

JOBSCHED, MUSSAS

DS290

STGMGMT

DS292

OPSYSFUNC, SECADM, TSOEMER

DS293

SECADM

DS294

KEYSYS

DS295

AUDIT

DS29532

DASDADM, SYSPROG, TAPEADM

DS296

DATACENTER

DS297

AUDIT, DASDBAT, OPERATORS, SECADM, SYSPROG

DS298

STGBATUSR, STGMGMT, SYSPROG

DS299

V299, V299_USERID

DS29952

FTPCC

DS302

CICS

DS31

APPSUP, DASDMGR, ENDUSER, OPERATORS, SECADM, SYSPROG

DS3219

CSSMTPADMIN, TCPAUTHUSR, TCPFTPUSR

DS3221

SYSPROGDS3223  NCPASSAPP, SECTERM, SMAPP

DS3240

AUTHUSER, SYSPROG

DS33795

HMCSHRD, VMSHRD

DS36

AUDIT, BMCMV, CA1STC, CCSSTC, CICS, CTRL-O, SYSPROG

DS3716

SHAREDUSER

DS3895

DASDADM, SYSPROG

DS3897

SYSPROG

DS3899

SYSMGMT, WASSTC

DS3905

MQADMIN, MQSTC, SYSPROG

DS4850

BATCHJOB, SYSPROG

DS54

AUTHBATCH

DS64803

AUDIT, AXRUSER, SECADM, SYSPROG

DS6904

SYSPROG

DS6919

NJEUser, OPERATORS, RJEUser

DS6920 

NJEUser, OPERATORS, RJEUser

DS6922

OPERATORS, SYSPROG

DS6924

JES2

DS6925

APPDEV, APPSUP, EXTWRT, SECADM, SYSPROG

DS6926

AUTOOPER, CSSMTP_EXTWRT, OPERATORS, SYSPROG

DS6928

OPERATORS, SYSPROG

DS6933

DFSMS_ENDUSR

DS6956

NWSYSPROG

DS6962

MQBATCH, MQCHIN, MQCICS, MQIMS

DS6966

MQPROC

DS6967

MQNLIST

DS6968

SECADM, SYSPROG_SUPRUSR, SYSTEM_STC, USSDAEMON, USSSERVR

DS6969

MQALTUSR

DS6970

USSSERVR

DS6971

MQADMIN

DS6972

SYSPROG, SYSTEM_STC

DS6973

MQCMDS

DS6974

SYSPROG

DS6976

SYSPROG

DS6977

SYSPROG

DS6991

SECADM, SYSPROG

DS7119

CAT3

DS71223

AUDIT, AXRUSER, REXX_STC, SYSPROG

DS7482

OPERATORS, SYSADMIN, SYSPROG

DS7487

OPERSTAFF, SYSPROG

DS7516

DSN, SYSPROG

DS85

APF

DT223650

SYSPROG

DT223666

BATCHJOB, SYSPROG

DT223670

STGBATUSR, SYSPROG

DT223677

AUDIT, AXRUSER, REXX_STC, SYSPROG

DT223678

SYSPROG

DT223680

SYSPROG

DT223686

AUTHDISA

DT223687

AUTHUSER, SYSPROG

DT223697

AUDIT, DATACENTER, GENSTC, SECADM, SYSPROG

DT223701

SMFDUMP_BATCH, SYSPROG

DT223722

SHAREDUSER

DT223735

AUTHUSER, SYSPROG

DT223751

JES2

DT223753

AUTOOPER, OPERATORS, SYSPROG

DT223754

ENDUSER, OPERATORS, SYSPROG

DT223816

DASDADM, SYSPROG

DT223823

CSSMTPADMIN, TCPAUTHUSR, TCPFTPPROF

DT223826

SYSPROG

DT223836

AUDIT, DASD_BATCH, OPERATORS, SECADM, SYSPROG

DT223845

SYSPROG

DT223846

SYSPROG, TSOUSS

DT223849

SYSPROG

DT235034

SYSPROG

MVSA0001

MCATALTER, MCATUPDATE

MVS00001

SYSPROG

MVS00004

PPTOK

RACF0008

AUDIT

RACF0010

RACF_BACKUP

RACF0017

RACF_BACKUP

RACF0019

SPECAUD

RACF0030

FIREFIGHT

RXV291

TRUSTED_STC

RX223661

TRUSTED_STC

SS000007

MONITORED_PROG, RACF

SS000008

MONITORED_PROG

TSS00009

SYSPROG

TSS00010

SYSPROG

TSS00011

SYSPROG

TSS00014

STORAGE

TSS00015

STORAGE

TSS00016

FTPUSERS

USS00001

UID0

USS00004

SYSPROG

ZVM00002

SYSPROG

ZVM00003

 AUDITOR, OPSYSFUNC, RACFSECADM, TSOEMER

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*