RACF Options Traits

The following tables describes the racf options segments and traits that are supported for alter operations and returned by extract operations.

 

More information about RACF Keys can be found here.

 

See Data Types for more information about Data Types.

 

See Operators for more information about Operator usage.

base

Trait RACF Key Data Types Operators Allowed Supported Operations
"base:add_creator_to_access_list" addcreat string "set"
"delete"
"alter"
"extract"
"base:automatic_data_set_protection" adsp string "set"
"delete"
"alter"
"extract"
"base:application_logon_auditing" applaudt string "set"
"delete"
"alter"
"extract"
"base:audit_classes" audit string "add"
"remove"
"alter"
"extract"
"base:uncataloged_data_set_access" catdsns string "set"
"delete"
"alter"
"extract"
"base:active_classes" classact string "add"
"remove"
"alter"
"extract"
"base:statistics_classes" classtat string "add"
"remove"
"alter"
"extract"
"base:log_racf_command_violations" cmdviol string "set"
"delete"
"alter"
"extract"
"base:security_label_compatibility_mode" compmode string "set"
"delete"
"alter"
"extract"
"base:enhanced_generic_naming" egn string "set"
"delete"
"alter"
"extract"
"base:erase_data_sets_on_delete" erase string "set"
"delete"
"alter"
"extract"
"base:erase_data_sets_on_delete_all" eraseall string "set"
"delete"
"alter"
"extract"
"base:erase_data_sets_on_delete_security_level" erasesec string "set"
"delete"
"alter"
"extract"
"base:generic_command_classes" gencmd string "add"
"remove"
"alter"
"extract"
"base:generic_profile_checking_classes" generic string "add"
"remove"
"alter"
"extract"
"base:generic_profile_sharing_classes" genlist string "add"
"remove"
"alter"
"extract"
"base:generic_owner" genowner boolean "set"
"delete"
"alter"
"extract"
"base:global_access_classes" global string "add"
"remove"
"alter"
"extract"
"base:list_of_groups_access_checking" grplist boolean "set"
"delete"
"alter"
"extract"
"base:password_history" history uint "set"
"delete"
"alter"
"extract"
"base:revoke_inactive_userids_interval" inactive string "set"
"delete"
"alter"
"extract"
"base:record_user_verification_statistics" initstat string "set"
"delete"
"alter"
"extract"
"base:max_password_change_interval" interval string "set"
"delete"
"alter"
"extract"
"base:jes_batch" jesbatch boolean "set"
"delete"
"alter"
"extract"
"base:jes_early_verification" jesearly boolean "set"
"delete"
"alter"
"extract"
"base:jes_network_user" jesnje string "set" "alter"
"extract"
"base:jes_undefined_user" jesundef string "set" "alter"
"extract"
"base:jes_execution_batch_monitoring" jesxbm boolean "set"
"delete"
"alter"
"extract"
"base:kerberos_encryption_level" kerblvl string "set" "alter"
"extract"
"base:audit_log_always_classes" logalwys string "set" "alter"
"extract"
"base:audit_log_default_classes" logdeflt string "set" "alter"
"extract"
"base:audit_log_failure_classes" logfail string "set" "alter"
"extract"
"base:audit_log_never_classes" lognever string "set" "alter"
"extract"
"base:audit_log_success_classes" logsucc string "set" "alter"
"extract"
"base:min_password_change_interval" minchang string "set" "alter"
"extract"
"base:mixed_case_password_support" mixdcase boolean "set"
"delete"
"alter"
"extract"
"base:multi_level_security_address_space" mlactive string "set"
"delete"
"alter"
"extract"
"base:multi_level_security_file_system" mlfs string "set" "alter"
"extract"
"base:multi_level_security_interprocess" mlipc string "set" "alter"
"extract"
"base:multi_level_security_file_names" mlnames boolean "set"
"delete"
"alter"
"extract"
"base:multi_level_security_logon" mlquiet boolean "set"
"delete"
"alter"
"extract"
"base:multi_level_security_declassification" mls string "set"
"delete"
"alter"
"extract"
"base:multi_level_security_label_alteration" mlstable boolean "set"
"delete"
"alter"
"extract"
"base:profile_modelling" model boolean "delete" "alter"
"extract"
"base:profile_modelling_generation_data_group" modgdg boolean "set"
"delete"
"alter"
"extract"
"base:profile_modelling_group" modgroup boolean "set"
"delete"
"alter"
"extract"
"base:profile_modelling_user" moduser boolean "set"
"delete"
"alter"
"extract"
"base:log_operator_actions" operaudt boolean "set"
"delete"
"alter"
"extract"
"base:passphrase_change_interval" phrint string "set" "alter"
"extract"
"base:data_set_single_level_name_prefix_protection" prefix string "set"
"delete"
"alter"
"extract"
"base:primary_language" primlang string "set" "alter"
"extract"
"base:protect_all_data_sets" protall string "set"
"delete"
"alter"
"extract"
"base:password_encryption_algorithm" pwdalg string "set"
"delete"
"alter"
"extract"
"base:special_character_password_support" pwdspec string "set"
"delete"
"alter"
"extract"
"base:raclist" raclist string "add"
"remove"
"alter"
"extract"
"base:log_real_data_set_name" realdsn boolean "set"
"delete"
"alter"
"extract"
"base:refresh" refresh boolean "set" "alter"
"extract"
"base:tape_data_set_security_retention_period" retpd string "set" "alter"
"extract"
"base:max_incorrect_password_attempts" revoke uint "set"
"delete"
"alter"
"extract"
"base:password_rules" rules boolean "delete" "alter"
"extract"
"base:rvary_status_password_format" rvarstfm string N/A "extract"
"base:rvary_status_password" rvarstpw string "set" "alter"
"extract"
"base:rvary_status_password_format" rvarswfn string N/A "extract"
"base:rvary_status_password" rvarswpw string "set" "alter"
"extract"
"base:log_commands_issuesd_by_special_users" saudit boolean "set"
"delete"
"alter"
"extract"
"base:security_label_control" seclabct boolean "set"
"delete"
"alter"
"extract"
"base:secondary_language" seclang string "set" "alter"
"extract"
"base:max_session_key_interval" sessint string "set"
"delete"
"alter"
"extract"
"base:security_label_auditing" slabaudt boolean "set"
"delete"
"alter"
"extract"
"base:security_label_system" slbysys boolean "set"
"delete"
"alter"
"extract"
"base:security_level_auditing" slevaudt string "set"
"delete"
"alter"
"extract"
"base:tape_data_set_protection" tapedsn boolean "set"
"delete"
"alter"
"extract"
"base:terminal_universal_access" terminal string "set" "alter"
"extract"
"base:password_expiration_warning" warning string "set"
"delete"
"alter"
"extract"
"base:program_control" whenprog boolean "set"
"delete"
"alter"
"extract"