search cancel

Can the ACF2 ACFRULCU utility be used to cleanup ROLEs that are no longer used?

book

Article ID: 200489

calendar_today

Updated On:

Products

ACF2 ACF2 - z/OS ACF2 - MISC

Issue/Introduction

Is there a  process to remove a logon that has left the firm for SET XREF(ROL) much like ACFRULCU cleanup for UID string based rules.?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Yes the ACFRULCU utility can be used if a site is using roles, the ROLNXIST parameter detects any rule line in a $ROLESET rule set that specifies a non-existent user value. SItes can use ROLNXIST with ROLESYS to identify rule lines that contain a value for a non-existent role value.

Here are the parameter descriptions related to ROLEs.

[ROLNXIST]
 
Specifies to remove all rule lines from the targeted rule sets that have a ROLE value that no longer exists. X(ROL) records can be identified by a SYSID. When using ROLNXIST against the active databases, the role records will be identified by the current SYSID. When using ROLNXIST against alternate databases, you must also specify ROLESYS to identify the SYSID of the X(ROL) records.
 
[ROLESYS(sysid)]
 
(Required when you are processing rules in the alternate databases and have ROLNXIST specified) Specifies a one- to eight-character SYSID value that identifies the correct X(ROL) records being used on the system. Specifying the incorrect SYSID might remove the wrong rule lines.
 
Sample JCL
 
//CLEANUP EXEC PGM=ACFRULCU,REGION=4096K              
//SYSPRINT  DD SYSOUT=*                               
//SYSOUT    DD DSN=PUBLIC.ACFRULCU.CLEANUP.D092920,   
//             UNIT=SYSDA,VOL=SER=SYSC28,             
//             DISP=(NEW,CATLG,DELETE),               
//             SPACE=(TRK,(15,15),RLSE),              
//             DCB=(LRECL=80,BLKSIZE=3120,RECFM=FB)   
//LOGONID  DD  DISP=SHR,DSN=ACFSYS.ALTLIDS        
//RULES       DD  DISP=SHR,DSN=ACFSYS.ALTRULES      
//INFOSTG   DD  DISP=SHR,DSN=ACFSYS.ALTINFO        
//SYSIN     DD *                                      
ACF2                                                  
ROLNXIST    
ROLESYS(E09*)                                              
/*              

Additional Information

Details can be found in section: 'ACFRULCU - Rule Cleanup Utility' of the ACF2 documentation.