Running IRRRID00 with an empty SYSIN

You might want to run the remove ID utility regularly, as part of a RACF® database cleanup task that you perform periodically, for example. When you run the utility with a SYSIN DD DUMMY statement, the output show all occurrences of residual IDs in your RACF database.

Figure 1. Running IRRRID00 with an empty SYSIN: Sample input

//CLEANUP  EXEC PGM=IRRRID00,REGION=25M
//SYSPRINT DD   SYSOUT=*
//SYSOUT   DD   SYSOUT=*
  ⋮ 
//INDD    DD   …
//OUTDD   DD   …
//SYSIN   DD   DUMMY

Figure 2. Running IRRRID00 with an empty SYSIN: Sample output

PERMIT   'A.B.**'   ID(MARK) DELETE
PERMIT   'UPROC1'   CLASS(TSOPROC) ID(MARK) DELETE
PERMIT   '12345'    CLASS(ACCTNUM) ID(MARK) DELETE
PERMIT   'A.B.**'   ID(JUNO) DELETE
PERMIT   'A.B.**'   OWNER(?JUNO)

As shown in Figure 2, IRRRID00 found several references to MARK and JUNO, even though these users did not have a profile in the USER class. IRRRID00 produces the commands you would need to change or remove these references in the various fields.