z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Which profiles protect a particular resource?

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

RACF® does not prevent you from specifying the same resource in more than one resource grouping profile. If you do so, more than one profile is used to determine the actual protection used. (See Resolving conflicts among grouping profiles.) It can be difficult to determine exactly what protection any one resource has.

To find out if more than one profile protects a particular resource, issue the RLIST command with the RESGROUP operand as follows:
RLIST TERMINAL resource-name RESGROUP

Make sure to specify the member class (such as TERMINAL or DASDVOL) on the RLIST command. The profiles that protect the terminal appear in the RLIST output under the RESOURCE GROUPS heading.

For example, assume that the following commands is issued.
RDEFINE GTERMINL DEPT20 ADDMEM(T1 T2 T3)
RDEFINE GTERMINL DEPT22 ADDMEM(T3)
To list all of the profiles that protect terminal T3, enter:
RLIST TERMINAL T3 RESGROUP
In response, RACF displays:
RESOURCE GROUPS
-------- ------
DEPT20   DEPT22
Note: If a "member class" profile exists for the resource (in this example, if RDEFINE TERMINAL T3 had been issued), the RLIST output includes both the resource groups and the listing of the TERMINAL profile.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014