New to Z

New to IBM Z

Deepen your technical skills, expand your global network, and connect with mentors and other early tenure professionals on the mainframe platform.

 View Only
  • 1.  Simplified RACF Administration

    Posted Wed May 14, 2025 09:05 AM
    Edited by Lionel Dyck Wed May 14, 2025 09:06 AM

    There is an open-source tool known as RACFADM that was created by systems programmers who work with RACF for systems programmers who work with RACF. This tool is a full ISPF dialog written in z/OS REXX. You can get it from https://github.com/lbdyck/racfadm or from https://cbttape.org - check the updates page for the latest. 

    The main ISPF Tutorial page provides more information.



    ------------------------------
    Lionel Dyck - IBM System Z Champion
    System Z Open-Source Advocate
    Retired
    ------------------------------



  • 2.  RE: Simplified RACF Administration

    Posted Wed May 14, 2025 10:22 AM

    Hi Lionel Dyck,

    Enhanced RACF Admin Efficiency & Control = f(UFI, STS, AC, C) / C_RACF

    • Enhanced RACF Admin Efficiency & Control: The desired outcome – making RACF administration better.

    • f: "is a function of" or "is achieved through"

    • UFI: User-Friendly Interface (menu-driven, interactive modification, single scrollable display).

    • STS: Simplified Task Set (listing profiles, connecting groups, adding permissions, user auth searching, displaying auth source).

    • AC: Automation Capabilities (automating creation of aliases/datasets).

    • C: Customizability (written in Rexx, tailor $STUB).

    • C_RACF: The inherent Complexity of Native RACF (the problem being addressed). The denominator implies RACFADM reduces or mitigates this complexity.

    (Complexity of Native RACF) + [RACFADM offering (User-Friendly Interface + Simplified Common Tasks + Automation + Customization)] → More Efficient, Simpler, and Controlled RACF Security Management

    Essentially, RACFADM acts as an "enhancement layer" or a "productivity toolkit" on top of the standard RACF system, aiming to make the life of a RACF security administrator easier, faster, and less error-prone.

    Good luck!

    SUMAN



    ------------------------------
    Suman Suhag
    Dev Bhoomi Uttarakhand University
    Data Science Student
    +91 8950196825 [Jhajjar, Haryana, India]
    ------------------------------



  • 3.  RE: Simplified RACF Administration

    Posted Fri May 16, 2025 08:07 AM

    Hello Lionel.

    Thank you for this RACFADM tool. Is there a way to download the entire dataset from Github? Like in TSO XMIT format or do we have to download each member one by one?



    ------------------------------
    Daniel Hamiel
    ------------------------------



  • 4.  RE: Simplified RACF Administration

    Posted Fri May 16, 2025 08:54 AM

    The easy way is to use git to clone the repository to your system.  If you don't have git on your z/OS system then check out IBM's Open Enterprise Foundation (OEF) which is free and included with z/OS 2.5 and 3.1 (and soon 3.2) that includes git, or get git from the https://github.com/zopencommunity.

    If you are unable to use git then you can download directly from the CBTTape website using this url: https://cbttape.org/ftp/updates/CBT417.zip

    hope this helps



    ------------------------------
    Lionel Dyck - IBM System Z Champion
    System Z Open-Source Advocate
    Retired
    ------------------------------