Introduction › Key Data Set Analysis › Key Data Set Analysis with RACF

Key Data Set Analysis with RACF

CA Auditor requires the RACF subsystem to be active for the R_admin (IRRSEQ00) callable service to issue the LISTDSD service. The RACF subsystem enables remote RACF administration and provides an execution environment for most RACF commands.

To analyse a data set, enter A on the line next to the entry.

CA Auditor invokes the RACF LISTDSD service which returns a list of:

• All applicable data set profiles
• The profiles lines within them that govern the security access policy for the data set

Important! The output may not reflect all possible allowed access situations. For example, user profile based privileges such as SPECIAL, OVERRIDE, and OPERATIONS are not in the output. A security audit should separately audit special high-privileged users and other special situations such as the use of SAF and RACF user exits.

For information on the RACF LISTDSD and subsystem command, see the RACF System Programmer's Guide.