search cancel

Is there an ACF2 Command or Report to list dataset Access?

book

Article ID: 238983

calendar_today

Updated On:

Products

ACF2 - z/OS

Issue/Introduction

Is there an ACF2 command, subcommand or Report to list a user's dataset Access?

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

The ACF ACCESS subcommand allows you to determine what logonids have access to a dataset, for example:

ACF
ACCESS    DSNAME('sys1.parmlib')

In order to use the ACCESS command it needs to be enabled since it is disabled by default.

To enable the ACCESS subcommand, you must define the GSO OPTS record ACCESS field, refresh the record, and issue the NEWUID operator command. The GSO OPTS record ACCESS field specifies if the ACCESS subcommand is enabled for processing. The NEWUID operator command builds the cross-reference tables to associate UIDs with logonids.

ACF
 SET CONTROL(GSO)
 CHANGE OPTS ACCESS
 F ACF2,REFRESH(OPTS)
 F ACF2, NEWUID

The ACFRPTRX report can be used to produce a report that shows all dataset access rules that allow a logonid or logonids access.

The ACFRPTXR report can be used to produce a report that shows what logonid have access to a specified dataset or datasets.