Selecting User IDs and Group Names

In your installation it might be enough for you to simply isolate development work from production. On the other hand, it might be more practical for you to define many individual users and groups. In either case, you should take a look at what already exists and modify RACF® to adapt to the current environment. For example, do any or all of the system users already have user IDs? If so, perhaps you can make use of them.

Whatever you choose, consider carefully the longer term security objectives: Adding new groups and users to an existing structure presents few administrative problems; even deleting users and groups can be done without much difficulty. However, a major reassignment of user IDs and group names, while possible, is best avoided by careful initial selection.