Topic: racf

• z/OS security with RACF: user, group, and dataset profiles, and why agents need least privilege

  RACF is the resource manager most z/OS installations use behind the System Authorization Facility (SAF) interface, protecting users, groups, and datasets through profiles queried with LISTUSER/LISTDSD and granted with PERMIT; an automation agent should run under a narrowly scoped user ID rather than one carrying broad access, and should not treat command output as a stable programmatic interface.

  article · en · reviewed · knowledge as of 2026-09-24

Machine-readable: JSON