Some RACF command examples

Allow Access to a RACF Resource

PERMIT profile-name ACCESS(access-type) CLASS(class-name) ID(userid)
Find all DSNs for a Profile

LD DA(‘profile’) ALL DSNS
Find all Profiles for a User

LD ID(userid)
List Profile Information (even if Generic exists)

LD DA(‘dsname’) GENERIC
List Group Information

LG group-name DFP
List User attributes

LU (user1,user2,user3) DFP TSO
Change a User Password

PW PASSWORD(current new) USER(userid)
ALU userid PASSWORD(new)
Reset a User Password to Default Group

PW USER(userid)
Delete Access to a Tape Volume

PERMIT tapevolser CLASS(TAPEVOL) USER(userid) DELETE
Add a Generic Profile

ADDSD ‘hlq.qual2.*’ UACC(access-type)
Restrict use of a Storage Class

SETROPTS CLASSACT(STORCLAS) RACLIST(STORCLAS)

RDEFINE STORCLASS storclas-name UACC(NONE)

PERMIT storclas-name CLASS(STORCLAS) ID(userID) ACCESS(READ)

SETROPTS REFRESH RACLIST(STORCLAS)

List a resource e.g. for CICS

RL TCICSTRN (*) ALLUSERS