Clean RACF Remotely Synchronized Environments

Support is provided for environments where multiple remote security databases exist and are kept synchronized using technologies such as RACF RRSF. In this environment, cleanup decisions must consider usage across all security databases, not usage seen within one. For example, a user ID or permission used daily within location one, might appear unused within the security database at location two. Because the databases are synchronized, it would be an error to clean up the item in location two, despite its appearance as being unused.
cleanup121
Support is provided for environments where multiple remote security databases exist and are kept synchronized using technologies such as RACF RRSF. In this environment, cleanup decisions must consider usage across all security databases, not usage seen within one. For example, a user ID or permission used daily within location one, might appear unused within the security database at location two. Because the databases are synchronized, it would be an error to clean up the item in location two, despite its appearance as being unused.
CA Cleanup supports the processing of multiple CA Cleanup databases as input. When you provide multiple databases, the report performs correlation and the report produces a collective composite report that is based on usage across all of the databases. Specifically, this behavior means that a user ID or permission that is used in one location does not appear on the cleanup report unless it is unused across all locations.
To provide multiple databases to the report, add a JCL statement, naming each remote database (or a locally available copy of it). Each remote file must have a file name that begins with //DBASE
n
, where
n
is a numeric suffix from 1 to 9. For example:
//AT8DBR JOB ACCT,REPORT,CLASS=A,MSGCLASS=X //*--------------------------------------------- //* REPORT UNREFERENCED ENTRIES OVER 30 DAYS //*--------------------------------------------- //S1 EXEC PGM=AT8#RPT,REGION=4M,PARM='UNREF=030' //STEPLIB DD DISP=SHR,DSN=CAI.CDY1LINK //DBASE DD DISP=SHR,DSN=CAI.ETRUST.DB.CHICAGO <- Chicago database //DBASE1 DD DISP=SHR,DSN=CAI.ETRUST.DB.NY <- New York database //DBASE2 DD DISP=SHR,DSN=CAI.ETRUST.DB.UK <- UK database