RACF database
The dataset where RACF keeps every user, group and profile, usually with a backup copy kept up to date alongside it.
Also written RACF dataset, primary RACF database, backup RACF database, RVARY, IRRDBU00
RACF keeps everything it knows in the RACF database: every user, group, dataset profile and general resource profile, with their access lists and settings. Each RACF command reads or changes it.
There is normally a primary database and a backup. RACF updates both as changes are made, so if the primary is damaged, the backup can take over. The RVARY command switches between them or takes one out of use, and it needs special approval to run, because it affects security for the whole system. In a sysplex, the systems usually share the same RACF database, so a change made on one system applies on all of them.
Because it is so important, the database is protected very closely, backed up often, and copied to disaster recovery sites.
For reporting, the database can be unloaded with the utility IRRDBU00 into a flat file with one record per profile or access entry. Security teams and auditors use that file to answer questions such as "who has access to these datasets?" across the whole system.
Where can I learn this hands-on?
Right here, at ZedBank. You take a junior job at a simulated bank and learn each part of the work by doing it, with Zed beside you. There's nothing to install.
Start at ZedBankRelated
- RACFThe security manager for z/OS, which decides who may sign on, read a dataset, or run a transaction.
- SETROPTSThe RACF command that sets and shows the security options for the whole system, such as password rules and which classes are active.
- RACF auditingRecording security events, such as failed access and changes to profiles, so they can be reviewed later.
- SysplexA group of mainframe systems joined together so they behave as one, sharing work and data so that no single failure stops the service.
- Security administratorThe person who manages mainframe security day to day: user IDs, access requests, security rules and audits.