ACF2 ACFRPTXR report based on access level for audit

Products

• ACF2 - z/OS
• ACF2
• ACF2 - MISC

Issue/Introduction

Auditors would like a report of only LIDs that have WRITE access to the datasets will be specified in a HLQ. Is this possible using the ACFRPTXR report?  

Resolution

The ACFRPTXR report does not have the capability to list users based on access level. To obtain information on who has a specific access level, decomp the rule for the high-level qualifier and then manually identify the rule entries with R(A).

Once the list of rule entries is identified, a list of users can be obtained by issuing a LIST command for the UID string mask or ROLE using ACFBATCH.  

For UID strings:
SET LID
SET TERSE
LIST LIKE(uid mask)

For ROLES:
SET X(ROL)
LIST role