Use Case - Temporary Access Rights

Sometimes people need temporary rights in RACF

Situation:
In every company and every government office, it happens every year throughout the year: people go on vacation, or on business trips, or on sick leave, and someone else has to do their job for them.
Let's take Jeannie, for example. She'll be taking over for John while he's on a 2-week training course. She can do the job, no problem, but during those two weeks she'll need the same RACF privileges as John, so she needs to be connected to the same groups.

Complications:
RACF administrators don't spend 365 days a year in the office, either, and in any case, this kind of thing happens so often that it's hard to keep track of who needs which extra privileges when and for how long.
It's important that people get their access rights as soon as they need them; on the other hand, giving a person access rights before they need them, or leaving someone with more rights than they need when their term of duty is over, always poses an unnecessary security risk. Who can always be sure of setting up temporary connects exactly when they're needed, and removing them again as soon as they're no longer needed? The same goes for temporary permits that need to revoked and resumed. Even if all this is written down, there's no guarantee that the administrator won't be ill when the time comes, for example, or maybe in an important meeting.

Solution:
The RACF administrator could solve the problem by putting a whole batch of RACF commands into a scheduler. Assuming, of course, that this administrator is authorized to use the central scheduler. In any case, this procedure is going to be time consuming and error prone, and unnecessarily complicated.

The ideal solution is offered by the Timed Commands function of the Beta 88 zSecurity Administrator. It enables you to easily set timed commands and their time slots online. Then, when the time comes, it connects and removes users and groups, gives access permits, or revokes and resumes users for as long as needed, and keeps a record of everything it's done.
So, at precisely 9 a.m. on the first day that John is not in the office, Jeannie will get her connects, and at precisely 5 p.m. on the last day they'll be removed again.

Click here to find out more about Beta 88 zSecurity Administratorin general and Timed Commands in particular.