RACF: Useful RACF commands

LISTUSER command

This command lists all the RACF groups connected to a TSO id

Example:-

TSO LISTUSER TXUXXXF 

Output of the command is below.

  REVOKE DATE=NONE   RESUME DATE=NONE                                          

  LAST-ACCESS=11.357/10:42:13                                                  

  CLASS AUTHORIZATIONS=NONE                                                     

  INSTALLATION-DATA=PPP-PPP-PPPP/TXUXXXF /999999999/INCERT0906/CONSULT         

                      801101955/                                               

  NO-MODEL-NAME                                                                

  LOGON ALLOWED   (DAYS)          (TIME)                                       

  ---------------------------------------------                                

  ANYDAY                          ANYTIME                                      

   GROUP=$XHXUX03  AUTH=USE      CONNECT-OWNER=@XXXXUSR  CONNECT-DATE=06.269   

     CONNECTS= 1,598  UACC=NONE     LAST-CONNECT=11.357/10:42:13               

     CONNECT ATTRIBUTES=NONE                                                   

     REVOKE DATE=NONE   RESUME DATE=NONE                                       

   GROUP=$XHXDXV   AUTH=USE      CONNECT-OWNER=@MXTXUSR  CONNECT-DATE=06.269   

     CONNECTS=    00  UACC=NONE     LAST-CONNECT=UNKNOWN                       

     CONNECT ATTRIBUTES=NONE                                                    

     REVOKE DATE=NONE   RESUME DATE=NONE                                       

LISTDSD command

This command tells you what kind of access you have to a dataset.

Example:-

TSO LISTDSD DATASET('DS8001.TED.USEFUL.JCLLIB') ALL GENERIC

Output of the command is below and it specifies that the dataset is protected by generic dataset profile DS8001.TED.** and the user has ALTER access to the dataset.

INFORMATION FOR DATASET DS8001.TED.** (G)          

                                                   

LEVEL  OWNER    UNIVERSAL ACCESS   WARNING   ERASE 

-----  -------- ----------------   -------   ----- 

 00    DS8001          NONE          NO      NO    

                                                    

AUDITING                                           

--------                                           

FAILURES(READ)                                     

                                                   

NOTIFY                                              

--------                                           

NO USER TO BE NOTIFIED                             

                                                   

YOUR ACCESS  CREATION GROUP  DATASET TYPE          

-----------  --------------  ------------          

   ALTER        $X650001       NON-VSAM