SYSIN Options for CA Cleanup for RACF

You specify report options in the SYSIN file. Options must begin in column 1 and must be uppercase. For example:
cleanup
You specify report options in the SYSIN file. Options must begin in column 1 and must be uppercase. For example:
//SYSIN DD * OPTION(
XXXX
) /*
Supported Options
The following options are available:
  • OPTION(REVOKEUSERS)
    Generates REVOKE commands instead of delete commands for users eligible for cleanup. When in effect, group connects and resource permissions are not removed from the user. This option allows the user to be simply "resumed" to regain full access. After a period of time, you can run the report again without the option to clean up the user, their related connections, and their permissions. This option is only valid when running an UNREF report.
  • OPTION(DELETEUSERS)
    (Default) Generates delete commands for users eligible for cleanup. When neither REVOKEUSERS or DELETEUSERS is specified, the DELETEUSERS option is in effect.
  • OPTION(COMMENTACCESSNONE)
    Causes all ACCESS NONE permissions to appear as commented commands. Sometimes, ACCESS NONE permissions should be retained even when not used. These permissions may be “stopper” permissions to prevent access or to direct access to a different permission. Commands that are generated with this option can be run and ACCESS NONE permissions are not removed. These permissions should be reviewed and uncommented when appropriate.  If the user and group that are associated with the Permit is deleted, the Permit is deleted also regardless of this option.
  • OPTION(LINECTL)
    (Default) Generates normal detail line spacing.
  • OPTION(NOLINECTL)
    Generates no detail line spacing.
  • OPTION(NOPAGEHDR)
    Generates no report header.
  • OPTION(ONEPAGEHDR)
    Generates one report header.
  • OPTION(PAGEHDR)
    (Default) Generates normal report headers