IBM Mainframe Forum

Sorry if this is a silly question - my company is in the midst of an ACF2 to RACF conversion, and so we're learning RACF on the fly, with the assistance of a consultant and some other training, etc.

We're looking ahead to post-production cutover, and how we will be setting up new users. Our management has thus far denied us the ability to purchase any sort of user admin/audit application like zSecure Admin, etc., so we're more or less on our own for the forseeable fututre.

We'd like to develop templates to use, as we have to process new employees/transfers, so what we'd like initially is some kind of report that would show us all of the groups within our RACF environment, and the resources they are connect to, and at what level (ALTER, READ, etc.). Once we have that, we could then start developing the templates.

Does this sound like something people do, or are we going about htis completely wrong? If it's the right direction, does this reporting exist in native RACF, of do we have a lot of busy work ahead of us?

Any help or advice is greatly appreciated!

The RACF Auditor's Guide manual talks about the native RACF reporting facility. That would be the first place I looked if I were in your place. Third party reporting tools exist, but as with all mainframe packages they tend to cost plenty.

Hello,

If the company has brought in a RACF consultant, maybe this person has a little "bag of tricks" . . .

I don't "do" racf, but i do travel with a bunch of odds and ends that i freely give a client if they are interested. As i basically do t & m (time and materials) contracts, i'll build something custom if the client wants it. Lots of things don't take long if one already knows how to do them.

This may be a way for your group to get some tools basically for "free" (i.e. no check written for purchased software).

Hi,

I would take a look at using the Database Unload (IRRDBU00) and coding some REXX or using ICETOOL to build what you need. Utility IRRUT100 may also give you some of the information you need. Many people use these methods quite effectively.

Regards

Dave