RACF Options Traits
The following tables describes the racf options segments and traits that are supported for alter operations and returned by extract operations.
More information about RACF Keys can be found in the IBM documentation.
See Data Types for more information about Data Types.
See Operators for more information about Operator usage.
base
| Trait | RACF Key | Data Types | Operators Allowed | Supported Operations |
"base:add_creator_to_access_list" | addcreat | boolean | "set""delete" | "alter""extract" |
"base:automatic_dataset_protection" | adsp | boolean | "set""delete" | "alter""extract" |
"base:application_logon_auditing" | applaudt | string | "set""delete" | "alter""extract" |
"base:audit_classes" | audit | string | "add""remove" | "alter""extract" |
"base:uncataloged_dataset_access" | catdsns | string | "set""delete" | "alter""extract" |
"base:active_classes" | classact | string | "add""remove" | "alter""extract" |
"base:statistics_classes" | classtat | repeat | "add""remove" | "alter""extract" |
"base:log_racf_command_violations" | cmdviol | string | "set""delete" | "alter""extract" |
"base:security_label_compatibility_mode" | compmode | boolean | "set""delete" | "alter""extract" |
"base:enhanced_generic_naming" | egn | string | "set""delete" | "alter""extract" |
"base:erase_datasets_on_delete" | erase | boolean | "set""delete" | "alter""extract" |
"base:erase_datasets_on_delete_all" | eraseall | string | "set""delete" | "alter""extract" |
"base:erase_datasets_on_delete_security_level" | erasesec | string | "set""delete" | "alter""extract" |
"base:generic_command_classes" | gencmd | repeat | "add""remove" | "alter""extract" |
"base:generic_profile_checking_classes" | generic | repeat | "add""remove" | "alter""extract" |
"base:generic_profile_sharing_classes" | genlist | string | "add""remove" | "alter""extract" |
"base:generic_owner" | genowner | boolean | "set""delete" | "alter""extract" |
"base:global_access_classes" | global | repeat | "add""remove" | "alter""extract" |
"base:list_of_groups_access_checking" | grplist | boolean | "set""delete" | "alter""extract" |
"base:password_history" | history | uint | "set""delete" | "alter""extract" |
"base:revoke_inactive_userids_interval" | inactive | string | "set""delete" | "alter""extract" |
"base:record_user_verification_statistics" | initstat | boolean | "set""delete" | "alter""extract" |
"base:max_password_change_interval" | interval | string | "set""delete" | "alter""extract" |
"base:jes_batch" | jesbatch | boolean | "set""delete" | "alter""extract" |
"base:jes_early_verification" | jesearly | boolean | "set""delete" | "alter""extract" |
"base:jes_network_user" | jesnje | string | "set" | "alter""extract" |
"base:jes_undefined_user" | jesundef | string | "set" | "alter""extract" |
"base:jes_execution_batch_monitoring" | jesxbm | boolean | "set""delete" | "alter""extract" |
"base:kerberos_encryption_level" | kerblvl | string | "set" | "alter""extract" |
"base:audit_log_always_classes" | logalwys | string | "set" | "alter""extract" |
"base:audit_log_default_classes" | logdeflt | string | "set" | "alter""extract" |
"base:audit_log_failure_classes" | logfail | string | "set" | "alter""extract" |
"base:audit_log_never_classes" | lognever | string | "set" | "alter""extract" |
"base:audit_log_success_classes" | logsucc | string | "set" | "alter""extract" |
"base:min_password_change_interval" | minchang | string | "set" | "alter""extract" |
"base:mixed_case_password_support" | mixdcase | boolean | "set""delete" | "alter""extract" |
"base:multi_level_security_address_space" | mlactive | string | "set""delete" | "alter""extract" |
"base:multi_level_security_file_system" | mlfs | string | "set" | "alter""extract" |
"base:multi_level_security_interprocess" | mlipc | string | "set" | "alter""extract" |
"base:multi_level_security_file_names" | mlnames | boolean | "set""delete" | "alter""extract" |
"base:multi_level_security_logon" | mlquiet | boolean | "set""delete" | "alter""extract" |
"base:multi_level_security_declassification" | mls | string | "set""delete" | "alter""extract" |
"base:multi_level_security_label_alteration" | mlstable | boolean | "set""delete" | "alter""extract" |
"base:profile_modelling" | model | boolean | "delete" | "alter""extract" |
"base:profile_modelling_generation_data_group" | modgdg | boolean | "set""delete" | "alter""extract" |
"base:profile_modelling_group" | modgroup | boolean | "set""delete" | "alter""extract" |
"base:profile_modelling_user" | moduser | boolean | "set""delete" | "alter""extract" |
"base:log_operator_actions" | operaudt | boolean | "set""delete" | "alter""extract" |
"base:passphrase_change_interval" | phrint | string | "set" | "alter""extract" |
"base:dataset_single_level_name_prefix_protection" | prefix | string | "set""delete" | "alter""extract" |
"base:primary_language" | primlang | string | "set" | "alter""extract" |
"base:protect_all_datasets" | protall | string | "set""delete" | "alter""extract" |
"base:password_encryption_algorithm" | pwdalg | string | "set""delete" | "alter""extract" |
"base:special_character_password_support" | pwdspec | boolean | "set""delete" | "alter""extract" |
"base:raclist" | raclist | repeat | "add""remove" | "alter""extract" |
"base:log_real_dataset_name" | realdsn | boolean | "set""delete" | "alter""extract" |
"base:refresh" | refresh | boolean | "set" | "alter""extract" |
"base:tape_dataset_security_retention_period" | retpd | unit | "set" | "alter""extract" |
"base:max_incorrect_password_attempts" | revoke | uint | "set""delete" | "alter""extract" |
"base:password_rules" | rules | boolean | "delete" | "alter""extract" |
"base:rvary_status_password_format" | rvarstfm | string | N/A | "extract" |
"base:rvary_status_password" | rvarstpw | string | "set" | "alter""extract" |
"base:rvary_switch_password_format" | rvarswfn | string | N/A | "extract" |
"base:rvary_switch_password" | rvarswpw | string | "set" | "alter""extract" |
"base:log_commands_issued_by_special_users" | saudit | boolean | "set""delete" | "alter""extract" |
"base:security_label_control" | seclabct | boolean | "set""delete" | "alter""extract" |
"base:secondary_language" | seclang | string | "set" | "alter""extract" |
"base:max_session_key_interval" | sessint | string | "set""delete" | "alter""extract" |
"base:security_label_auditing" | slabaudt | boolean | "set""delete" | "alter""extract" |
"base:security_label_system" | slbysys | boolean | "set""delete" | "alter""extract" |
"base:security_level_auditing" | slevaudt | string | "set""delete" | "alter""extract" |
"base:tape_dataset_protection" | tapedsn | boolean | "set""delete" | "alter""extract" |
"base:terminal_universal_access" | terminal | string | "set" | "alter""extract" |
"base:password_expiration_warning" | warning | string | "set""delete" | "alter""extract" |
"base:program_control" | whenprog | boolean | "set""delete" | "alter""extract" |