The following tables define field names and their usage. All field
names relate directly to the CONNECT and REMOVE keywords. Although
the fields are alphabetized in the following tables, there is no defined
order in which the fields are returned when using the extract function.
See z/OS Security Server RACF Command Language Reference
for questions pertaining to field usage and data. Note that within
the command image generated internally, RACF® truncates
long keywords to 12 characters.
Boolean fields are identified in the field name column. Unless
otherwise noted, a field is a character field by default.
Table 1. Base segment fields| Field name |
Flag byte values |
CONNECT and REMOVE
keyword reference , or LISTUSER heading (for output-only fields) |
Allowed on CONNECT requests |
Allowed on REMOVE
requests |
Returned on extract requests |
|---|
| ADSP (boolean) |
'Y' |
ADSP |
Yes |
No |
Yes |
| 'N' |
NOADSP |
Yes |
No |
| AUDITOR (boolean) |
'Y' |
AUDITOR |
Yes |
No |
Yes |
| 'N' |
NOAUDITOR |
Yes |
No |
| AUTH |
'Y' |
AUTHORITY(xx) |
Yes |
No |
Yes |
| CGAUTHDA |
N/A |
CONNECT-DATE= |
No |
No |
Yes |
| CGINITCT |
N/A |
CONNECTS= |
No |
No |
Yes |
| CGLJDATE |
N/A |
LAST-CONNECT= (left side of "/") |
No |
No |
Yes |
| CGLJTIME |
N/A |
LAST-CONNECT= (right side of "/") |
No |
No |
Yes |
| GROUP |
'Y' |
GROUP(xx) |
Yes |
Yes |
No |
| GRPACC (boolean) |
'Y' |
GRPACC |
Yes |
No |
Yes |
| 'N' |
NOGRPACC |
Yes |
No |
| OPER (boolean) |
'Y' |
OPERATIONS |
Yes |
No |
Yes |
| 'N' |
NOOPERATIONS |
Yes |
No |
| OWNER |
'Y' |
OWNER (xx) |
Yes |
Yes |
Yes |
| RESUME (on input, this
can be used as a boolean or a date. On output, this is the resume
date.) |
'Y' |
RESUME (xx) |
Yes |
No |
Yes |
| 'N' |
NORESUME |
Yes |
No |
| REVOKE (on input, this
can be used as a boolean or a date. On output, this is the revoke
date. See REVOKEFL field for boolean output.) |
'Y' |
REVOKE (xx) |
Yes |
No |
Yes |
| 'N' |
NOREVOKE |
Yes |
No |
| REVOKEFL (boolean) |
N/A |
N/A |
No |
No |
Yes |
| NOTE: The value
of the REVOKEFL field is consistent with the behavior of the LISTUSER
command in that it takes revoke and resume dates into account when
determining if the user is revoked. |
| SPECIAL (boolean) |
'Y' |
SPECIAL |
Yes |
No |
Yes |
| 'N' |
NOSPECIAL |
Yes |
No |
| UACC |
'Y' |
UACC (xx) |
Yes |
No |
Yes |
z/OS Security Server RACF Callable Services
Copyright IBM Corporation 1990, 2014