IBM Security Z Security

 View Only
  • 1.  RACF Warning data appearing in Access Monitor Data

    Posted Mon June 13, 2022 11:23 AM
    We are starting to use the FSACCESS Class, but since we don't don't know what needs to be on the access list and we don't know the profiles that are needed.   So we are using WARN mode on the profiles to start to get an idea of the resource / profile names and the Users that need access.

    I realize I can look at SMF data to get a report of the warnings that have occurred.   But if you are looking over a period of time, that can be a lot of SMF files to bring in as input.    We were trying to use Access Monitor data to give us a list of the warnings that occurred in the class.     It appears the warnings are in the data, but they appear as an RC0, and there is nothing that we can see to key off of that the event is a warning versus a successful access attempt.

    The ISPF screens have selection criteria for Success, No Profile, Not Authorized, or Other.   Nothing for Warning.     Is it possible to create a "warning" report via Access Monitor data, or is it better to use SMF data?

    ------------------------------
    Linnea Sullivan
    ------------------------------


  • 2.  RE: RACF Warning data appearing in Access Monitor Data

    Posted Tue June 14, 2022 02:23 AM
    Linnea,

    On the AM.1 screen select the "Simulated Fields Selection" option. Under the "Authority used in the current DB" select the WARNING. option.

    Most important that it is simulated based on the current DB. Once the profiles are not in WARNING mode the same selection will not produce a report.


    Brian Mills

    ------------------------------
    Brian Mills
    ------------------------------



  • 3.  RE: RACF Warning data appearing in Access Monitor Data

    Posted Tue June 14, 2022 10:43 AM
    Thanks, Brian.
    For some reason Simulated Fields just did not ring any bells that Warning would be listed there.

    ------------------------------
    Linnea Sullivan
    ------------------------------