FAQ
RACF

What is SAF?

SAF or System Authorisation Facility is an interface defined by MVS that enables programs to use system authorisation services to control access to resources, such as datasets, MVS commands, JES, etc. SAF can either process security authorisation requests directly, or work with an External Security Manager (ESM) such as RACF, […]

RACF

z/OS In-Built Security Features

The following are the in-built security features that come with z/OS: System Authorization Facility (SAF): SAF is part of the operating system. SAF is available whether or not an additional security product such as RACF, ACF2 or Top Secret is installed. If an additional security product is installed, SAF routes […]

RACF

RACF Templates

The RACF database contains records whose format is controlled by a set of database templates. The templates map out how profiles are written on the RACF database. IBM makes changes to the templates to add new segments to the RACF database, or to add new fields to existing segments. The […]

RACF

UACC and ID(*) in RACF

If you work with mainframes, you are probably familiar with UACC (universal access) and ID(*). Many people believe that UACC and ID(*) represent the same thing. This is not true. They are slightly different and you need to take the difference in consideration when planning your RACF security environment. Access Authority Description […]

CARLa

CARLa to list RACF Global Access Table Profiles

The following CARLa script will list the RACF Global Access Table (GAT) profiles: n i=base s c=general and s=base c=GLOBAL sortlist class(key,pas) searchkey(key,nondispl) key(key,pas,12), memlst(header,0,sort) The result of the above CARLa script should look like: Class Profile key Members GLOBAL DATASET &RACUID.**/ALTER SYS1.HELP/READ