Excellent. Now why didn't I think of that?
Thank you Walt.

Lennie

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of 
Walt Farrell
Sent: 23 August 2023 16:30
To: [email protected]
Subject: Re: Updating IEEMB846

On Tue, 22 Aug 2023 13:07:01 +0100, Lennie Dymoke-Bradshaw 
<[email protected]> wrote:

>I am trying to determine which users are using the TSO CONSOLE command.
>
>This is controlled one of those TSOAUTH checks that are done at LOGON 
>time and the results of the RACF check are stored in the PSCB in bit 
>PSCBCNAU. So many normal RACF checking monitors (such as zSecure Access 
>Monitor) are of no use. I want to know who is using it, rather than who can 
>use it.

Have you considered defining CONSOLE in the RACF PROGRAM class, allowing READ 
access to everyone, and setting appropriate AUDIT options?

--
Walt

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to