Mainframe – How to create a Universal Group:

• RACFSSA option (14) is the recommended process for creation.  This should be used, because it requires a description during the creation process.

Mainframe – How to grant/remove access to a Universal Group:

• Maintenance on a Universal Group is performed in the same manner as a standard RACF group.

Mainframe – How to delete a Universal Group:

• The standard ‘DG’ command will not totally remove this type of group.  You must use Vanguard 3.xx (group profile).  Enter (1) Group Profile Summary, then enter the group name and enter (Y) in universal group field.  Once group summary is returned, enter (DL) on the command line.  This should totally remove the group and all member access. 

How would I convert an existing standard group to a Universal group?

• When you need to convert an existing standard RACF group/groups to a new Universal group, please contact Corporate Computer Security for procedures.

How would I convert an existing RACF default group to a Universal group?

• When you need to convert an existing default RACF group to a new Universal default group, please contact Corporate Computer Security for procedures.

How would a business owner review and acknowledge this type of group?

• Even though reviewing such a large number of users would be difficult, acknowledgement of universal groups is still required.  This acknowledgement may include having the appropriate administration processes in place to maintain these groups.