o-s , security , visio-stencils

Mainframe – When would I create a Universal vs. a Standard RACF group?

April 30, 2022
  • If you have an existing standard RACF group that has reached it’s maximum user limit of 6,000, the following options are now available:
    • Create another rollover standard RACF group and attach it to all the appropriate resources.  This was the only option available until the implementation of Universal RACF groups.
    • Create a Universal RACF group with a different group name and connect it to all of the appropriate resources.  Once the group is created, you could migrate all of the users from the standard group/groups to the (1) new Universal group.
    • Re-use the existing standard RACF group name to create a new Universal group that contains all the existing users as well as all of the appropriate resource connections.  Note:  You will need to contact CCS for these procedures.
  • If you are preparing to create a RACF group that contains more than 2,000 users and will possibly grow, Universal groups should be used.
  • If you are preparing to create a RACF group that contains fewer than 2,000 users and the member limit will not grow, Standard groups should be used.

Universal RACF Groups

All IBM RACF profiles (user, group, dataset, and resource), have a membership limit of 6000 users.  A new type of RACF group, known as a “Universal” RACF group, has been introduced.  If you are preparing to create a RACF group, that contains more than 2,000 users and will possibly grow, you should consider using a Universal group.