We are in an environment with multiple plexes and each plex has one RACF database. We want to set our RRSFDATA profiles to allow SETROPTS commands to be propagated between the plexes. We are considering this for the SETROPTS RACLIST/GENERIC REFRESH commands, to make it easier on the administrator concerning issuing the refresh commands.
However that also allows other SETROPTS commands to be propagated as well. We are concerned about an engineer accidentally changing an option in SETROPTS and it being propagated to all the plexes.
Are there any controls that I have not considered that let me separate the SETROPTS REFRESH from the other SETROPTS commands?
I know there are controls in Command Verifier that I can use to control which command the administrator/engineer can issue, but nothing concerning propagation via RRSF.
------------------------------
Linnea Sullivan
------------------------------