Resource Access specifications in ACF2 vs RACF

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

When referring to IBM product documentation, RACF resource access attributes ALTER, CONTROL and EXECUTE are specified with different values in ACF2.

Environment

Release: R16.0

Component: ACF2MS

Resolution

The CA ACF2 equivalents for the (IBM) RACF resource access attributes are:

RACF Attribute   -     CA ACF2 Resource Rules (Service)

     READ           -            READ

     UPDATE       -            UPDATE

     ALTER         -            ADD

     CONTROL    -            DELETE

     EXECUTE     -            EXECUTE