Yes the ACFRULCU utility can be used if a site is using roles, the ROLNXIST parameter detects any rule line in a $ROLESET rule set that specifies a non-existent user value. SItes can use ROLNXIST with ROLESYS to identify rule lines that contain a value for a non-existent role value.
Here are the parameter descriptions related to ROLEs.
Specifies to remove all rule lines from the targeted rule sets that have a ROLE value that no longer exists. X(ROL) records can be identified by a SYSID. When using ROLNXIST against the active databases, the role records will be identified by the current SYSID. When using ROLNXIST against alternate databases, you must also specify ROLESYS to identify the SYSID of the X(ROL) records.
(Required when you are processing rules in the alternate databases and have ROLNXIST specified) Specifies a one- to eight-character SYSID value that identifies the correct X(ROL) records being used on the system. Specifying the incorrect SYSID might remove the wrong rule lines.
//CLEANUP EXEC PGM=ACFRULCU,REGION=4096K
//SYSPRINT DD SYSOUT=*
//SYSOUT DD DSN=PUBLIC.ACFRULCU.CLEANUP.D092920,
//LOGONID DD DISP=SHR,DSN=ACFSYS.ALTLIDS
//RULES DD DISP=SHR,DSN=ACFSYS.ALTRULES
//INFOSTG DD DISP=SHR,DSN=ACFSYS.ALTINFO
//SYSIN DD *