o-s , policies , security , visio-stencils

Mainframe – RACF Frequently Asked Questions

May 2, 2021

1)  Is special RACF authority required to create a Universal Group?

     No, it requires the same standard SSA authority.

2)  Can you just change an existing standard RACF group attribute to a Universal group     

      attribute?

       No, the Universal attribute can only be defined at creation. 

3)  Can you create a Universal group with the same name as an existing standard group?

      Once a standard RACF group has been totally deleted from RACF, a Universal group     

      can be created with the same name. 

5)  Do we have any Universal groups currently working in production?

Yes, several Universal groups are currently working in production.  Some of these                      groups have user membership above 20,000.

6)  Does TIM recognize Universal groups?

     TIM recognizes Universal groups the same as standard.  Note:  If you are migrating a

     TIM managed group from standard to universal, the TIM team needs to be involved in

     the migration of users as well as pointing TIM to the appropriate new group. 

7)  Is there a report which shows all the Universal groups currently in the Mainframe

     Environment?

     Yes, Vanguard 3.x / 4.x reports can return all RACF Universal Groups.