Consul
zAdmin
RACF Administration.
Many of today’s IT staff have limited RACF management experience, so controlling the power inherent to RACF is not an easy task. Consul zAdmin RACF identifies problems in RACF such as, missing or inconsistent definitions, and fixes or prevents mistakes before they become a threat to security. By utilizing Consul zAdmin RACF, sites can optimize the talents of their security managers and harness the power of the RACF security environment.
zAdmin works with the active RACF database, so the information you see is exactly what RACF is using: the changes made seconds ago are immediately visible. However, you can also work from an unloaded RACF database to review profiles from an arbitrary time in the past, allowing you to recover profiles that were accidentally changed or deleted.
Consul zAdmin RACF allows more granular distribution of administrative authority than can be set natively within RACF. In particular, the central security administrator can delegate the authority to perform password resets, “resume” a user, and grant specific accesses – without granting full administrative privileges to the distributed staff. This capability allows frequently requested user-support tasks to be managed by the support staff closest to the user, and frees up the senior administrator for mission-critical tasks.
zAdmin's features include:
- Administration of SecureWay Security Server (RACF)
- Central and decentralized usage
- Technical and business user interfaces
- Live RACF database, unloads, multiple databases
- Profiles and resources
- Standard RACF authorities or extended (group admin)
- Merge, cleanup, repair tools
- Easy reporting and historical analysis
- ISPF and batch
- Timed permits/revokes, previous/default password, etc.
- Multiple authorities possible for crucial commands
Business Benefit:
- Decentralized Administration
With Consul zAdmin RACF the central security officer can delegate the authority to perform specific tasks, without granted full administrative rights. This allows your central security officer to focus on greater and more demanding tasks. - Save Time
Recurring security tasks, such as running daily or monthly reports, which typically provide a more comprehensive analysis of the security definitions and settings within the RACF environment, are automated by Consul zAdmin RACF. - Increase Security
For highly sensitive user IDs, you can even opt for a policy whereby two administrators have to agree to a command before it is executed, thus, implementing a workflow control system for security management. - Flexibility
Consul zAdmin RACF allows you to copy or move users, groups, applications or whole databases between systems, as well as rename IDs within the same database. - Ready for the Web
Consul zAdmin RACF supports the certificates that define users to the IBM Web Server, just like any other RACF profile.