Use Case - Access Rights for new Employees
Another new employee needs access rights in RACF
Situation:
A lot of new people have started at the company, and all of them need to be given access
rights to the resources and data they need to do their jobs.
For example, there's Harry N., he's joining Accounts Payable. Harry's new department manager
contacts RACF administration and asks them to set up a user profile for Harry. She doesn't know
exactly what rights Harry needs, but she can say that he'll be doing exactly the same job as Jim
O., who'll be retiring at the end of the year (Harry will be taking over Jim's role).
The RACF administrator receives the following task: "Please give Harry N. the same rights as
Jim O. by January 1, 2005 ".
Complications:
Before the RACF administrator can give Harry the same rights as Jim, he first has to find out
what rights Jim has. That means he has to make the following analysis:
What does Jim's user profile look like, which groups is he connected to, does he have any
additional special permits, can he log on to TSO, …?
An analysis like this isn't easy using RACF alone; it's tedious and it takes time. Then, once
the administrator has the information he needs, he has to key in all this data using complex RACF
commands: set up the user profile with the right fields, make the connects to the appropriate
groups, set up special permits for the new user ID (not best practice, but it does happen). Again,
it's a complex task that's tedious and takes time. And worst of all, it's error prone. The
administrator mustn't forget anything, or Harry won't be able to do his job properly. He mustn't
give Harry too many rights, or he could end up as a security risk.
Solution:
The solution is a clone function that analyzes a user profile and then makes an exact copy of
it. Unfortunately, RACF doesn't offer this complex operation as a command, so it has to be
programmed first. Some old stagers who've been working with RACF for years write their own programs
to make this routine task easier for them. But not everybody has the time or experience to do this.
Therefore the ideal solution is Beta 88 zSecurity Administrator. It goes without saying that Beta
88 zSecurity Administrator comes with a ready-made clone command – easy to use, fast and efficient.
Don't let tedious routine tasks get you down: Click here to take a closer look at Beta 88 zSecurity
Administrator.










