Data Source

Description

RACF data

Supported RACF data includes:

• The active primary or backup RACF database.
• An unloaded RACF database, unloaded by zSecure Admin (CKRCARLA). Be aware a zSecure RACF UNLOAD data set does not contain any password information.
• A RACF database copy taken with the standard IBM RACF utilities IRRUT200 or IRRUT400.

SMF data

Supported SMF data includes:

• The active SMF data sets.
• SMF records in their original format dumped by the IBM utility IFASMFDP or the zSecure Audit utility C2RJFUNL.

CKFREEZE data

Supported CKFREEZE data includes:

• Live settings, based on information directly read from the control blocks of the current live system. Please be aware that this live settings information is limited, not all available audit reports can be generated using the live settings.
• One or more data sets containing resource information gathered by the IBM Security zSecure Collect job (CKFCOLL).

Access Monitor data

Access data sets are generated by the Access Monitor started task. These data sets contain a collection of all RACF access decisions taken in the timeslot that it covers. Access data sets can be used for access reporting and cleaning up access control lists or entire resource profiles.

External Files

Supported data sets are any installation defined data sets, which can be referenced in CARLa programs. Prerequisite for using external files is that you must define all variables yourself in your CARLa program to enable the program to work with external data.

CARLa statement

Description

NEWLIST

Marks the start of a new CARLa report.

TYPE=

Select the type of NEWLIST to be used as an input for the report. You use TYPE=RACF, for example, to extract and report RACF information. The RACF NEWLIST is the default if you omit the TYPE= statement.

There are many other NEWLIST types (currently 68 for RACF systems) that you can use to generate reports. You can use command “FIELDS” in the command line. Select report “BUILTIN” that is automatically generated and shown, to display the supported NEWLIST types. This report also contains the field names available within each supported NEWLIST TYPE.

DEFINE

Define your own CARLa variables or fields to use in your program.

SELECT

This operand is used to select/filter records that match all the conditions specified in the select statement.

CLASS=

Select the RACF profile class to report on.

SEGMENT=

Select the segment to report on from the RACF profile. For example, BASE, TSO, CICS, or OMVS.

MASK=

Select profiles by using a mask (wildcard or joker) on the profile key.

SORTLIST

Specify the fields to be shown for the selected records in your report, based on the selection criteria.

KEY

The profile name found that matches your selection criteria.

DFLTGRP

The default group of the pertinent user profile.

OWNER

The owner of the profile.

SUMMARY

Produce statistical values to include in your report.

/* ………….. */

Comments in your CARLa code.