COMMON RACF COMMANDS FOR ADMINISTRATORS:

.List a USER ID:
LU HRSOxxx

.Resume an ID:
ALU HRSOxxx RESUME

.Revoke an ID:
ALU HRSOxxx REVOKE

.Set a temporary PASSWORD:
ALU HRSOxxx PASSWORD(anything)
- Password can be 1 to 8 characters, will require changing
when logging on the system

.Resume an ID and set a temporary Password
ALU HRSOxxx RESUME PASSWORD(anything)

.Change the NAME= field:
ALU HRSOxxx NAME('1 to 20 characters')
- if name is O'BERRY, recommend using a double quote within the
single quotes ex: ('john o"berry')

.Connect an ID to a RACF group:
CO HRSOxxx GROUP(groupname) OWN(groupname)

.Remove an ID from a RACF group ( if authorized ):
RE HRSOxxx GROUP(groupname)

.List a RACF group ( if authorized ):
LG groupname

.Change the INSTALLATION-DATA= field:
ALU HRSOxxx DATA('1 to 255 characters')
- if name is O'BERRY, recommend using a double quote within the
single quotes ex: ('john o"berry')


Grant access to dataset

PE   'DHRdataset' ID(tsoid) GEN AC(UPDATE)

 

Refresh from W 

#ZWSETR 

 

Refresh from A

#SETR 

 

To refresh the county lists of TSO IDs

DHRTSO.TEAM51.ZCOUNTY

 

To update a RULE

1)      O.2.2.3

2)      3          dataset profile

3)      1          summary    =>  dataset DHR.DHR2*

 

4) LV to see what the current rule is

5) (DL) Just to get the VRA.COMMAND screen

6) ALD                 warning(RUCA

                              Audit(failures(read))

                              Notify(TS51S00)

                              UACC(none)

                              DATA(‘wazrning data’)

                             

 

 

 

 


.The above commands can be entered from TSO/ISPF option 6

NOTE: if an id is Revoked because it is no longer required:
1. Issue command: LU HRSOxxx
2. If the id is connected to groups ( other then the default group )
then send an email to Tech.Support.Request.RACF@ncmail.net to have
the group(s) removed
3. ALWAYS send a request to have TSOids cleaned up by Tech Support

.TSO dataset 'DHR.HLH.IDS' contains a list of all H2/N1/TS12/TS53 ids
.TSO dataset 'DHRTSO.TEAM51.IDLIST' contains a list of all DHHS TSOids
.TSO dataset 'DHRTSO.TEAM51.IDGROUP' contains a list of all DHHS Groups
.Ids must not be re-assigned until at least six months of no activity
.Ids must be revoked and cleaned up when they are no longer required

Thanks, Tom Gerow ( 919-855-3135 )