Learn it on Mainframe Path. Do it with MainframeKit.Learn on Mainframe Path ▸
MainframeKit

IRR017I

Verification failed: revoked at group levelRACF MESSAGE

The group is valid for the user, but the user's access through that group has been revoked, so the job ends with no steps run.

MOST LIKELY

The user's connection to the group was revoked by the security team or by a site rule.

FIRST CHECK

Report the message to your RACF security administrator.

TRY IT ▸

Block size and space calculator

What it means

IRR017I means the user is connected to the group named on the job (or their default group), but the connection to that group is revoked.

The user ID itself may still be fine. Only the use of this group is blocked.

Typical causes

  • The user's connection to the group was revoked by the security team or by a site rule.
  • The job names a group that the user should no longer use.
  • A default group was changed or revoked.

How to fix it

  1. Report the message to your RACF security administrator.
  2. Check the group named on the JOB statement.
  3. Ask for the connection to be resumed or for a different valid group, through the normal process.

Example

Illustrative only; names and values are invented.

IRR017I VERIFICATION FAILED. USER IS REVOKED AT THE GROUP LEVEL.