BMC Mainframe: Understanding RACF
The course is developed and delivered by © RSM Technology.
Today a sound understanding of security is essential for all of us working in IT. This one-day course is the ideal introduction to IBM's RACF, and is suitable for all technicians, administrators, support personnel and managers who will come across RACF in their daily work.
It is also an ideal introduction to RACF for Systems Programmers and those training to be RACF Administrators. The course clearly explains the concepts and terminology of RACF and introduces all the major RACF commands.
Major release:
BMC Mainframe Infrastructure Platform Training
Good for:
Users
Course Delivery:
Instructor-Led Training (ILT) | 8 hours
Course Modules
-
Introduction to RACF
- What is required of a security system?
- IBM's Resource Access Control Facility (RACF)
- Main RACF/MVS components
- How does RACF work?
- RACF Profiles
- RACF classes
- Controlling access
- RACF commands
-
Planning for RACF
- Management commitment
- Selecting a security planning and implementation team
- Responsibilities of the implementation team
- Deciding what to protect
- Deciding how to protect data
- Establishing ownership structures
- Establishing who needs access
-
RACF Group Structure
- RACF group structure
- Group types; Dataset owning groups
- Users owning groups
- General Resource groups
- Concept of group and profile ownership
- Administration delegation
- Benefits of RACF groups
- Defining RACF groups
- Group CONNECT authority
- Group profile contents
- Group related commands
-
Defining Users to RACF
- Information on users
- RACF user information
- DFP segment information
- TSO segment information
- OPERPARM segment information
- NETVIEW segment information
- CICS segment information
- OMVS segment information
- Defining a new User
- Prepare to create the user profile
- Create the User Profile
- Give user access to any RACF-protected areas
- User-related commands
- User attributes
- Classifying users and data
- Security categories and levels
- Security labels
-
Defining Datasets to RACF
- Dataset related commands
- Dataset protection
- Discrete profiles
- Generic profiles
- Rules for defining dataset profiles
- Naming Convention
- Dataset profile ownership
- Defining Generic Profiles
- Access authority for datasets
- Adding dataset profiles – ADDSD
- Permitting access (PERMIT command)
-
Defining General Resources
- General Resource related commands
- Class Descriptor Table (CDT)
- IBM-defined Resource Classes
- Steps for defining General Resource profiles
- Granting access to a General Resource
- Global Access Table (GAT)
-
Maintenance & Housekeeping
- Maintenance and housekeeping activities
- SETROPTS command options
- Options for initial setup
- In-storage profiles
- SETROPTS REFRESH Option
- Maintaining the RACF database(s)
- Maintenance utilities
- Maintaining the Started Task Table
- Data Security Monitor (DSMON)