Is there a process to remove a logon or ROLE that has left or is undefined for SET XREF(ROL) records like the ACFRULCU utility for rules?
Release : 16.0
Component : CA ACF2 for z/OS
The TSO, ACF, cross reference VALIDATE subcommand described in section 'Process Cross-Reference Records Using ACF Commands' can be used to identify both ROLEs and logonids specified in XROL records that do not exist. The VALIDATE subcommand can be used from TSO, ACF, ACFBATCH or from the ACF2 ISPF panels.
From TSO, ACF:
ACF
SET X(ROL)
VALIDATE LIKE(-)
From ACFBATCH:
//ACFBATCH EXEC PGM=ACFBATCH
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
SET X(ROL)
VALIDATE LIKE(-)
/*
Or from the ACF2 ISPF option 9.6 'VALIDATE AN XREF RECORD' panel:
---------------------------- VALIDATE AN XREF RECORD -----------------------
COMMAND ===>
VALIDATE
RECORD TYPE ===> ROL (RGP, SGP,COL)
SYSID ===> SYSTEM ID FOR XREF RECORD
MASK SYSID ===> MASKED SYSTEM ID FOR XREF RECORD
MASK RECID ===> - RECID MASKED VALUE
RECID ===>
Sample Output
INCLUDE LOGONIDS NOT FOUND FOR ROLE !CICS1
A200ATC A200RAA E009310 E009695 F107AJP F801MLC F801SEH
F810BAN F810JRP F810MLN F810RLV F901CEP G230AMS G230ASH
G230EFG G230JAH G329CLC G329DMB G620KDH I120AMV I120CAE
I120DAS I120EGI I120KAR I120LOG I120RSB I121NMM I606AKM
I606AND I609BNM I609BOR I609CLW I609KAH I609KYK I609MAR
I611BEU I611NMB I620KSC I620KSK I620SDJ I830ASH N130ADC
N130CCM N130JIS N130JKH N130MRB N130TJG N130TMT N239DSP
N239KPD N265BMT N658MBG P1DEC P1KDM P1SSN P6CKC
R003515 R003516 R003518 R003523 R003544 T003193 T003194
T003195 T003239 T003293 T003294 T003295 T003299 T003300
T003338 -NONE-
INCLUDE LOGONIDS NOT FOUND FOR ROLE ABC
DECR*
ROLE ACCOUNT VALID
INCLUDE LOGONIDS NOT FOUND FOR ROLE AEXDEPO0
EPC0045 EPC0064 EPC0065 EPC0066 EPC0067 EPC0094 EPC0099
ROLE ALLUSR VALID
ROLE AXROLE VALID
ROLE AZROLE VALID
ROLE AZROLE2 VALID
ROLE BOCATEC VALID
INCLUDE LOGONIDS NOT FOUND FOR ROLE CHILD
TIM
INCLUDE ROLES NOT FOUND FOR ROLE GROUP FINANCE
TLC250