Some RACF command examples

Allow Access to a RACF Resource
PERMIT profile-name ACCESS(access-type) CLASS(class-name) ID(userid)

Find all DSNs for a Profile
LD DA(‘profile’) ALL DSNS

Find all Profiles for a User
LD ID(userid)

List Profile Information (even if Generic exists)
LD DA(‘dsname’) GENERIC

List Group Information
LG group-name DFP

List User attributes
LU (user1,user2,user3) DFP TSO

Change a User Password
PW PASSWORD(current new) USER(userid)

ALU userid PASSWORD(new)

Reset a User Password to Default Group
PW USER(userid)

Delete Access to a Tape Volume
PERMIT tapevolser CLASS(TAPEVOL) USER(userid) DELETE

Add a Generic Profile
ADDSD ‘hlq.qual2.*’ UACC(access-type)

Restrict use of a Storage Class
SETROPTS CLASSACT(STORCLAS) RACLIST(STORCLAS)
RDEFINE STORCLASS storclas-name UACC(NONE)
PERMIT storclas-name CLASS(STORCLAS) -
ID(userID) ACCESS(READ)
SETROPTS REFRESH RACLIST(STORCLAS)

List a resource e.g. for CICS
RL TCICSTRN (*) ALLUSERS

0 comments on Some RACF command examples

MyMusic

Flickr recent photosets

Porlock Vale 2011