Manage Class Processing with RACF

When using CLASS processing with RACF, note the following behaviors:
cleanup121
When using CLASS processing with RACF, note the following behaviors:
  • Class names of USERID or GROUP that use NAME gives results as if the matching names were specified individually in the INCLUDE or EXCLUDE files.
  • The special ID “*PROF*” can be requested with:
    CLASS(USERID) NAME(*PROF*)
  • The special ID “*” can be requested by specifying “*” followed by a blank: CLASS(USERID) NAME(* ).
  • Class names of USERID and GROUP with NAME(*) select all entries within that class. This option can be used to produce a report of only users or groups.
  • NAME(*) can only be specified in INCLUDE and only with class names USERID and GROUP.
  • Class names of USERID and GROUP in the EXCLUDE file must provide the NAME keyword but cannot specify NAME(*).
Class names of USERID and GROUP without NAME report only the lines that contain that class name. This option can be used to obtain a report with only one line per ID.
INCLUDE and EXCLUDE Examples
This example excludes one user from reporting:
//EXCLUDE DD * USERA
This example excludes two resource classes from a full report:
//EXCLUDE DD * CLASS(class1) CLASS(class2)
This example reports all items for one user:
//INCLUDE DD * USERB
This example reports everything for one user except for one class:
//EXCLUDE DD * CLASS(class1) //INCLUDE DD * USERC
This example reports TSOPROC usage for all ID’S:
//INCLUDE DD * CLASS(TSOPROC)
This example reports everything for user ID’S starting with ABC:
//INCLUDE DD * CLASS(USERID) NAME(ABC)
This example excludes user ID’S starting with XYZ from the report:
//EXCLUDE DD * CLASS(USERID) NAME(XYZ)
This example reports only on users:
//INCLUDE DD * CLASS(USERID) NAME(*)
This example reports only on groups:
//INCLUDE DD * CLASS(GROUP) NAME(*)
This example reports only the USERID line:
//INCLUDE DD * CLASS(USERID)
This example reports one class for groups starting with ABC:
//INCLUDE DD * CLASS(GROUP) NAME(ABC) CLASS(class1)
These example reports user-to-group connections:
//INCLUDE DD * CLASS(USERLIST)
This example reports usage of datasets beginning with SYS2 and SYS3:
//INCLUDE DD * CLASS(DATASET) NAME(SYS2.) CLASS(DATASET) NAME(SYS3.)