IBM Mainframe Forum

Hi ,

In racf , How to find out who has created an user id in the system.where can we find out RACF db or SMF or syslog ?

AFAIK, RACF does not record who created a user id nor is there anything in SMF about who created the user id.

Hello,

Unless the system is completely out of control, only a few people have authorization to add users. . .

Simply asking should be an easy to find out.

If the real question is more in the nature of what tasks do I have to do to create a userid? (and your userid has the appropriate permissions)

• Use the ADDUSER command to create the userid in the RACF data base.[
  8]

OK. We'll try this again.

If the real question is more in the nature of "What tasks do I have to do to create a userid?" (and your userid has the appropriate permissions)

• Use the ADDUSER command to add the user to the RACF database/
• Use the ADDDSD command to create a userid.* profile in the RACF database.
• Use the DEFINE ALIAS(NAME(userid) RELATE(user-catalog name)) command to create the user alias in the master catalog to a user catalog.
• Most sites have additional requirements; you'll have to find out about them on your own. The first three are essentially universal. The last time I did this I think there were 10 things I had to do.

If the real question really is the topic; with RACF it might be recorded in SMF, but I rather doubt that's the answer you want. I know the more recent Top Secret releases store this information in access permissions; I don't know about user definition.

Hi ,

My actual question is : I want to find out who has created a userid XXXXA in mainframe System? These information where i can get it in SMF or RACF DB?

Ask your site security group who created the user id. If they do not remember, there is nothing on the system that provides the creator of a user id. RACF does not record this. SMF does not record this. It is simply not available on the system -- only personal memory can help you; if none of the security group remembers setting up the user id then your answer is that no, there is no way to tell who created a user id on the system.

The security group should keep the requests somewhere.

Hello,

Usually adding a new user invloves more than some online transaction. . .

There is the request for the id, and a list of which permissions the new user is to be granted. Usually, this involves management signatures (either on paper or electronically).

dick scherrer is correct. Back in the days when I was a Top Secret DCA, I tried to get requests submitted via E-mail, and I tried to save the request in a security request folder if anything came back to me. Nothing ever did, unless the request did not get copied to the system where it was really required, which happened more often than I liked, but I can't recall higher authority ever challenged what I did do.