ACF2 attribute for ROAUDIT in RACF

Products

• ACF2
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

Is there an ACF2 attribute similar to ROAUDIT in RACF?

Resolution

The AUDIT privilege in ACF2 is comparable to RACF's ROAUDIT. A user with the AUDIT privilege defined in their logonid record can display logonid records, access and resource rules, and infostorage records. A logonid with this privilege is known as an auditor. An auditor can issue the ACF SHOW subcommands that display ACF2 system control options, but an auditor cannot modify any of these components of the ACF2 system. An auditor cannot update or delete logonid records or access any resources other than those authorized through rules, although a site can authorize auditors to update certain logonid record fields. The AUDIT privilege also gives users search and read access to directories in HFS.

Additional Information

For more information on AUDIT and other ACF2 attributes, please review the ACF2 documentation section Logonid Record Fields.