IBM Security Z Security

 View Only
  • 1.  Report, physical datasets by RACF profile

    Posted Fri March 15, 2024 10:02 AM

    I'm trying to pull a list of physical datasets protected by a RACF profile.  The CARLa I have is close but I'm trying to change three things.   

    1) My current query is pulling all profiles which are more discrete and that profile's datasets.

    2) It's putting the profile and dataset name on separate lines.  Ideally, I'd like them on the same line, even if it means repeating the profile name.

    3) The datasets are duplicated multiple time.  I understand why, but how to get rid of dups.

      See the attached CARLa and report

    Thank you,

    Brent



    ------------------------------
    Brent Brimacomb
    ------------------------------


  • 2.  RE: Report, physical datasets by RACF profile

    Posted Fri March 15, 2024 11:11 AM
    Edited by Sander De Graaf Fri March 15, 2024 11:12 AM

    Maybe the following query can help; it uses NEWLIST type DSN

    n type=dsn 
     select profile=SYS1.*.** 
     display  complex profile dsn_type dsn 

    This lists all datasets protected by a profile that matches SYS1.**. If you want to match the exact profile name, the select statement can be changed to

    select profile='SYS1.*.**'c

    =>


        SYSTEM  SYS1.*.**                                    nvsam  SYS1.AADFMAC1  
        SYSTEM  SYS1.*.**                                    nvsam  SYS1.AADRLIB   



    ------------------------------
    Sander De Graaf
    ------------------------------



  • 3.  RE: Report, physical datasets by RACF profile

    Posted Fri March 15, 2024 12:26 PM

    That got the profile and dataset name both on the same line, however I'm still getting all the profiles more specific or more discrete.  Also still duplicates on the dataset name.  Thank you for the help.

    Brent



    ------------------------------
    Brent Brimacomb
    ------------------------------



  • 4.  RE: Report, physical datasets by RACF profile

    Posted Fri March 15, 2024 12:35 PM

    Could you explain what you mean by "getting all the profiles more specific or more discrete." and what you are trying to select?

    I think duplicate data set names can occur with data sets that are on multiple volumes. The newlist documentation writes about the key of the DSN newlist:

    A record is uniquely identified by the fields VER,SYSTEM, COMPLEX, DSN_TYPE, DSNAME, DEVICE_CLASS, VOLUME, FIRST_VOLUME, FSEQN, CATALOG,A record is uniquely identified by the fields VER,SYSTEM, COMPLEX, DSN_TYPE, DSNAME, DEVICE_CLASS, VOLUME, FIRST_VOLUME, FSEQN, CATALOG,CATALOG_VOLUME, REAL_DSN and REAL_VOLUME. 

    One of these fields could help determine why the data sets are duplicated.

    In the query I wrote above, a simple NODUP on the NEWLIST statement would work. This removes all duplicate output lines.



    ------------------------------
    Sander De Graaf
    ------------------------------



  • 5.  RE: Report, physical datasets by RACF profile

    Posted Fri March 15, 2024 01:18 PM

    Sure.  In your query:

    n type=dsn 
     select profile=SYS1.*.** 
     display  complex profile dsn_type dsn 

    I'm getting not only SYSZ.*.** , but also getting other profiles, SYSZ.*.PROCLIB*.**, SYSZ.*.TCPPARM*.**, SYSZ.*.USER.PARMLIB*.**, SYSZ.*.USER.PARMLIB*.** and SYSZ.**    

    I forgot to put the NODUP on, but had it originally.  The duplicates are now gone.


    I really only want the profile I provide in the select statement.

    Thank you!

    Brent



    ------------------------------
    Brent Brimacomb
    ------------------------------



  • 6.  RE: Report, physical datasets by RACF profile

    Posted Fri March 15, 2024 03:07 PM

    I totally missed your part of the message "select profile='SYS1.*.**'c".  That solved my problem.

    Thanks for all the help!

    Brent



    ------------------------------
    Brent Brimacomb
    ------------------------------