Now suppose that you want to show only user IDs that are added or deleted in the time slot between when the Unload was taken and today. In that case, you can compare the Unload data set with the active primary (or backup) RACF database.

Sample output:

Please understand that this CARLa program can verify only differences in two static RACF information sources. User IDs that are added after the unload was taken and are deleted before comparing the unload against the active RACF database, are not reported. The same applies for user IDs that are deleted after the unload was taken and added before comparing it to the active RACF database.

To be 100% certain to report all user ID additions and deletions, you must log all ADDUSER and DELUSER commands to SMF by using the appropriate RACF audit flags. You can then use the CARLa programming language to report on the use of these commands from the logged SMF records.

 

 

View Suggested samples and answers

 

Continue with the Compare options

 

© Copyright IBM Corp. 2012, 2020

IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.