Can Roles in ACF2 have USERS and ROLES specified together?
Article ID: 143568
Updated On:
Products
Issue/Introduction
Is it possible to create a group that contains both other roles AND users?
this is a user: username stcname username username TASK ACID
this is a role: DEV**** / rolename LAST CHANGED BY xxxxxx ON 20/01/20-16:35
INCLUDE(name1 name2 name3 name4) ROLE
If a group role record is inserted will it look for username and rolename as lids or roles?
INS grouprole INCLUDE(username rolename) GROUP
Environment
Release : 16.0
Component : CA ACF2 for z/OS
Resolution
A group role record cannot be created to include both users and roles.
- ROLE indicates that the record defines a group of users.
- GROUP indicates that the record defines a group of roles. Specify GROUP only when you want to define an X ROL record that includes other X ROL records.
If the role record is specified as a group record it assumes all includes are role records, not users.
In the example, all the users in the rolename role would be included plus anyone in the username role. The user username would not be included unless it was included in the role.
Feedback
