Hello Gianfranco,
The ID newlist has a flag field called TSO which will be Yes when the ID has a TSO segment, and No otherwise.
Therefore, you can use a lookup for the fields from the RACF segment to achieve this type of report as follows:
newlist type=id
select class=user id=U000*
sortlist id :name :dfltgrp :revoke tso
Regards, Mike
#ZSecurity#Support#SupportMigration