Creating a RACF group for access to payroll data and adding payroll operations workers to the group
As a first step in giving payroll operations workers the RACF SELECT, INSERT, UPDATE, and DELETE privileges on the PAYDEPT view, you need to create a RACF group, and add the IDs of users who can have access to payroll data to the group.
Procedure
- Define a RACF group for the payroll personnel.
- Add payroll personnel IDs to the group.
Example
ADDUSER PAYOWNER CLAUTH(DSNR USER) UACC(NONE)
ADDGROUP PAYOPS SUPGROUP(SYS1) OWNER(PAYOWNER)
CONNECT PAYOWNER GROUP(PAYOPS) AUTHORITY(JOIN) UACC(NONE)
ALTUSER PAYOWNER DFLTGRP(PAYOPS)
CONNECT USRT010 GROUP(PAYOPS)