ACF2 User IMS Transaction Access Reporting

Products

• ACF2 - z/OS
• ACF2
• ACF2 - MISC

Issue/Introduction

What would be the best approach to list ACF2 users who have logged into a specific IMS Application/Transaction within a period of time, for example 1 year?

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

The best approach without looking to compliance tools outside of ACF2 would be to run the ACFRPTRV report with the following filters:

TYPE(typemask)
ID(idmask)

Replace typemask with the 3 character typecode for the transaction and replace idmask with the resource name for the transaction. This report can be ran with JCL or by using the ACF2 ISPF Report Menu.

Note: this can be tedious if processing a large amount of SMF data. Also, all resource rule lines for these transactions that specify ALLOW will need to be changed to LOG, otherwise an SMF record will not be cut and nothing will show up in the report.

With this in mind, this is something that can be implemented now and data can be gathered on over time with the report being ran periodically. It is not information that can be pulled immediately without setup.