Getting started with RACF (after first installing RACF)

After you initialize your system with RACF® active for the first time, you can quickly achieve system security. During RACF installation, the following profile is created in the RACF database:

Group	Superior group	Owner	Connected users (group authority)
SYS1	—	IBMUSER	IBMUSER (JOIN)

There is only one user:

User	Default group (group authority)	Attributes	Connected groups (group authority)
IBMUSER	SYS1 (JOIN)	SPECIAL and OPERATIONS	—

And there are four security labels:

Name	Owner	UACC
SYSHIGH	IBMUSER	NONE
SYSLOW	IBMUSER	NONE
SYSNONE	IBMUSER	NONE
SYSMULTI	IBMUSER	NONE

There is a set of supplied certificate authority (CA) certificates. They are not used to authenticate CAs until you decide to use them. For more information, see Supplied digital certificates.

Restrictions: The basic set of profiles described in this topic is supplied with RACF. These profiles cannot be defined by your installation and should not be deleted. They must exist at initialization time or RACF initialization will automatically add them.