When you define a group to RACF®, you create a group profile in the RACF database. A group profile consists of segments: a base segment and optionally, CSDATA, DFP, OMVS, OVM, and TME segments.

Each segment of a group profile consists of fields. When you define a group's profile (using the ADDGROUP command) or change a group's profile (using the ALTGROUP command), you can specify the information contained in each field of each segment. To define or change information in a non-base segment of a group profile, you must have the SPECIAL attribute or at least UPDATE authority to the segment through field-level access control.

You can list the contents of an entire group profile or the contents of individual segments of the group profile using the LISTGRP command. To display information in a non-base segment of a group profile, you must have the SPECIAL or AUDITOR attribute or at least READ authority to the segment through field-level access control.

For more information, see Field-level access checking and Controlling access to the DFP segment.

For information on how to use the ADDGROUP, ALTGROUP, and LISTGRP commands, see z/OS Security Server RACF Command Language Reference.