Define new user to RACF via batch JCL sample

//DEFRACF EXEC PGM=IKJEFT01,DYNAMNBR=20

//SYSLBC DD DSN=SYS1.BRODCAST,DISP=SHR

//SYSEXEC DD DISP=SHR,DSN=SYS1.SBPXEXEC

//SYSPROC DD DISP=SHR,DSN=SYS1.HRFCLST

//SYSTSPRT DD SYSOUT=*

//SYSTSIN DD *

/*******************************************************************/

/* THIS MEMBER IS USED BY MAINUSER PROGRAM. */

/* */

/* CUSTOMIZE: */

/* PROC(SYSUSER): Change the PROC to your TSO logon procedure. */

/* ACCTNUM(12345678): Change it to your TSO account number. */

/* ALTUSER %USERID% NOSPECIAL NOOPERATION NOGRPACC */

/* If you need to add a highest authority user, change it t */

/* ALTUSER %USERID% SPECIAL OPERATION GRPACC */

/* */

/* SYMBOLS TO BE REPLACED BY PROGRAM: */

/* %USERID% : This is the upper case TSO userid. */

/* %LCUSERID%: This is the lower case TSO userid. */

/* %PASSWORD%: This is initial password for TSO userid. */

/* %USERNAME%: This is the user name of the TSO userid. */

/* %UID% : This is the UID of the user, */

/* It should be unique in system, however it will */

/* be maintained by MAINUSER program. */

/*******************************************************************/

ADDUSER %USERID% NAME('%USERNAME%') +

DFLTGRP(USER) UACC(READ) +

OMVS( +

UID(%UID%) +

PROGRAM('/bin/sh') +

HOME('/u/%LCUSERID%') +

) +

TSO( +

PROC(SYSUSER) +

ACCTNUM(12345678) +

SIZE(24000) +

MAXSIZE(0) +

UNIT(SYSDA) +

JOBCLASS(A) +

USERDATA(0000) +

)

ADDSD '%USERID%.**' GENERIC OWNER(SYS1) UACC(READ) +

AUDIT(FAILURES(READ)) LEVEL(00) DATA('USER DATASET GROUP')

PERMIT '%USERID%.**' GENERIC ID(%USERID%) ACCESS(ALTER)

PERMIT ** CLASS(ACCTNUM) ID(%USERID%)

SETROPTS RACLIST(ACCTNUM) REFRESH

PERMIT ACCT CLASS(TSOAUTH) ID(%USERID%)

PERMIT CONSOLE CLASS(TSOAUTH) ID(%USERID%)

PERMIT JCL CLASS(TSOAUTH) ID(%USERID%)

PERMIT MOUNT CLASS(TSOAUTH) ID(%USERID%)

PERMIT OPER CLASS(TSOAUTH) ID(%USERID%)

PERMIT PARMLIB CLASS(TSOAUTH) ID(%USERID%)

PERMIT RECOVER CLASS(TSOAUTH) ID(%USERID%)

PERMIT SUBMIT CLASS(TSOAUTH) ID(%USERID%)

PERMIT TESTAUTH CLASS(TSOAUTH) ID(%USERID%)

SETROPTS RACLIST(TSOAUTH) REFRESH

PERMIT DBAUSER CLASS(TSOPROC) ID(%USERID%)

PERMIT IKJACCNT CLASS(TSOPROC) ID(%USERID%)

PERMIT IKJASE CLASS(TSOPROC) ID(%USERID%)

PERMIT ISPUSER CLASS(TSOPROC) ID(%USERID%)

PERMIT PLSUSER CLASS(TSOPROC) ID(%USERID%)

PERMIT SYSUSER CLASS(TSOPROC) ID(%USERID%)

PERMIT TEST CLASS(TSOPROC) ID(%USERID%)

PERMIT TIVUSER CLASS(TSOPROC) ID(%USERID%)

SETROPTS RACLIST(TSOPROC) REFRESH

PERMIT ISFOPER.SYSTEM CLASS(SDSF) ID(%USERID%) ACCESS(UPDATE)

PERMIT ISFATTR.OUTPUT.* CLASS(SDSF) ID(%USERID%) ACCESS(UPDATE)

PERMIT ISFATTR.** CLASS(SDSF) ID(%USERID%) ACCESS(UPDATE)

PERMIT ISFCMD.** CLASS(SDSF) ID(%USERID%) ACCESS(UPDATE)

PERMIT ISFINIT.** CLASS(SDSF) ID(%USERID%) ACCESS(UPDATE)

PERMIT ISFOPER.** CLASS(SDSF) ID(%USERID%) ACCESS(UPDATE)

SETROPTS RACLIST(SDSF) REFRESH

PERMIT MVS.ROUTEMGR.OMPROUTE CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT MVS.ROUTEMGR.OROUTED CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT MVS.SERVMGR.PAGENT CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT MVS.SERVMGR.RSVPD CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT JES2.CANCEL.** CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT JES2.MODIFY.* CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT JES2.** CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT MVS.CANCEL.** CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT MVS.VARY.TCPIP.** CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT MVS.** CLASS(OPERCMDS) +

ID(%USERID%) ACCESS(UPDATE)

SETROPTS RACLIST(OPERCMDS) REFRESH

PERMIT BPX.SUPERUSER CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT CBD.CPC.IOCDS CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT CBD.CPC.IPLPARM CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.DISK.FULLPACK CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.DISK.INPUT CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.DISK.UPDATE CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.OAM.OUTPUT CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.OAM.UPDATE CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.TAPE.BLP CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.TAPE.DUPLICATE CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.TAPE.INPUT CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.TAPE.MOUNT CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.TAPE.OUTPUT CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.TAPE.UPDATE CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT DITTO.VSAM.UPDATE CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT MVSADMIN.WLM.POLICY CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT STGADMIN.EDG.MASTER CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT STGADMIN.EDG.VRS CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT MVSADMIN.XCF.** CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT STGADMIN.ADR.** CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT STGADMIN.EDG.** CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT STGADMIN.IDC.** CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

PERMIT STGADMIN.IGG.** CLASS(FACILITY) +

ID(%USERID%) ACCESS(UPDATE)

SETROPTS RACLIST(FACILITY) REFRESH

OSHELL mkdir /u/%LCUSERID%

OSHELL chown %LCUSERID%:user /u/%LCUSERID%

ALTUSER %USERID% PASSWORD(%PASSWORD%) RESUME

ALTUSER %USERID% NOSPECIAL NOOPERATION NOGRPACC

//* END OF ADDUSER JCL