z/OS Security Server RACF Command Language Reference
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


RACF command limits for non-base segments in RACF profiles

z/OS Security Server RACF Command Language Reference
SA23-2292-00

In general, you can specify up to 255 operands with a single command to create or alter a non-base profile segment. Exception: For the CSDATA segment in user and group profiles, you can specify up to 85 operands with a single command.

Examples of non-base segments in user profiles include the OMVS, TSO and CSDATA segments. Examples of non-base segments in general resource profiles include the CDTINFO, EIM, and STDATA segments.

The following RACF® commands create or alter non-base segments in profiles, and operate within these limits:
  • ADDGROUP
  • ADDSD
  • ADDUSER
  • ALTDSD
  • ALTGROUP
  • ALTUSER
  • RALTER
  • RDEFINE.

If you issue a single command specifying more than 255 operands for a non-base profile segment (other than the CSDATA segment), the command will not execute correctly although it will appear successful. Only the remainder of n ÷ 255 operands will be applied to the database, where n is the number of operands you specified for the segment. For example, if you issue the ALTUSER command specifying 259 operands for a non-base segment, RACF applies only the last 4 operands to the database.

If you issue a single command specifying more than 85 operands for the CSDATA segment, the command will not execute correctly although it will appear successful. Only the first 85 operands will be applied to the database, and the rest will be ignored. For example, if you issue the ALTUSER command specifying 93 operands for the CDTINFO segment, RACF applies only the first 85 CSDATA operands and ignores the last 8 CSDATA operands.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014