Contents
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix
Purpose of This Document ................................ ix
Who Should Read This Document ........................... x
How to Use This Document ............................... x
Where to Find More Information ............................. x
RACF Version 1 Release 10 Publications ..................... x
Related Publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xii
Softcopy Publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
Internet Sources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
RACF Courses .................................... xiv
To Request Copies of IBM Publications ....................... xiv
Summary of Changes .................................. xv
Chapter 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
How RACF Meets Security Needs ........................... 3
Administering Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
RACF Group and User Structure ........................... 15
Using RACF Installation Exits to Customize RACF ................. 29
Tools for the Security Administrator .......................... 30
Chapter 2. Organizing for RACF Implementation ................ 41
Ensuring Management Commitment ......................... 42
Selecting the Security Implementation Team .................... 42
Defining Security Objectives and Preparing the Implementation Plan ...... 44
Deciding What to Protect ................................ 44
Establishing Ownership Structures .......................... 47
Educating the System Users .............................. 49
Checklist for Implementation Team Activities .................... 51
Chapter 3. Defining Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
User Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Ownership of a RACF User Profile .......................... 56
User Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Default Universal Access Authority (UACC) ..................... 66
Assigning Security Categories, Labels, and Levels to Users ........... 66
Limiting When a User Can Access the System ................... 68
Defining Shared User IDs ............................... 69
General Considerations for User ID Delegation ................... 72
Summary of Steps for Defining Users on VM .................... 74
Deleting a User ..................................... 75
Chapter 4. Defining Groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Group Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Group Naming Conventions .............................. 81
Benefits of Using RACF Groups ............................ 82
Group Ownership and Levels of Group Authority .................. 83
Summary of Steps for Defining a RACF Group ................... 85
Summary of Steps for Deleting Groups ....................... 86
Copyright IBM Corp. 1984, 2004 iii
