Sorry if this is a silly question - my company is in the midst of an ACF2 to RACF conversion, and so we're learning RACF on the fly, with the assistance of a consultant and some other training, etc.
We're looking ahead to post-production cutover, and how we will be setting up new users. Our management has thus far denied us the ability to purchase any sort of user admin/audit application like zSecure Admin, etc., so we're more or less on our own for the forseeable fututre.
We'd like to develop templates to use, as we have to process new employees/transfers, so what we'd like initially is some kind of report that would show us all of the groups within our RACF environment, and the resources they are connect to, and at what level (ALTER, READ, etc.). Once we have that, we could then start developing the templates.
Does this sound like something people do, or are we going about htis completely wrong? If it's the right direction, does this reporting exist in native RACF, of do we have a lot of busy work ahead of us?
Any help or advice is greatly appreciated!
Built in RACF reports?
-
- Posts: 3
- Joined: Fri Feb 12, 2010 8:11 pm
- Skillset: In the midst of an ACF2>RACF conversion
- Referer: Google
-
- Global moderator
- Posts: 3720
- Joined: Sat Dec 19, 2009 8:32 pm
- Skillset: Systems programming, SAS, COBOL, CICS, JCL, SMS, VSAM, etc.
- Referer: other forum
- Location: Dubuque, Iowa, USA
Re: Built in RACF reports?
The RACF Auditor's Guide manual talks about the native RACF reporting facility. That would be the first place I looked if I were in your place. Third party reporting tools exist, but as with all mainframe packages they tend to cost plenty.
- dick scherrer
- Global moderator
- Posts: 6268
- Joined: Sat Jun 09, 2007 8:58 am
Re: Built in RACF reports?
Hello,
If the company has brought in a RACF consultant, maybe this person has a little "bag of tricks" . . .
I don't "do" racf, but i do travel with a bunch of odds and ends that i freely give a client if they are interested. As i basically do t & m (time and materials) contracts, i'll build something custom if the client wants it. Lots of things don't take long if one already knows how to do them.
This may be a way for your group to get some tools basically for "free" (i.e. no check written for purchased software).
If the company has brought in a RACF consultant, maybe this person has a little "bag of tricks" . . .
I don't "do" racf, but i do travel with a bunch of odds and ends that i freely give a client if they are interested. As i basically do t & m (time and materials) contracts, i'll build something custom if the client wants it. Lots of things don't take long if one already knows how to do them.
This may be a way for your group to get some tools basically for "free" (i.e. no check written for purchased software).
Hope this helps,
d.sch.
d.sch.
Re: Built in RACF reports?
Hi,
I would take a look at using the Database Unload (IRRDBU00) and coding some REXX or using ICETOOL to build what you need. Utility IRRUT100 may also give you some of the information you need. Many people use these methods quite effectively.
Regards
Dave
I would take a look at using the Database Unload (IRRDBU00) and coding some REXX or using ICETOOL to build what you need. Utility IRRUT100 may also give you some of the information you need. Many people use these methods quite effectively.
Regards
Dave
-
- Similar Topics
- Replies
- Views
- Last post
-
- 1
- 2009
-
by willy jensen
View the latest post
Mon Jul 15, 2024 8:42 pm
-
- 3
- 2608
-
by aarvalar1
View the latest post
Fri May 17, 2024 5:04 pm
-
- 7
- 3771
-
by celsofigueiredo
View the latest post
Thu Mar 18, 2021 11:03 pm
-
-
RACF profile usage not logged in SMF dataset
by aarvalar1 » Wed May 01, 2024 7:35 pm » in Mainframe Security - 3
- 2416
-
by Robert Hansel
View the latest post
Sat May 11, 2024 9:32 pm
-
-
-
Converting universal groups to normal Racf group
by aarvalar1 » Thu May 23, 2024 10:15 pm » in Mainframe Security - 5
- 2805
-
by Robert Hansel
View the latest post
Wed Jul 24, 2024 5:12 pm
-