Re: RACF Automation (Cross Posted)

2024-01-26 Thread Mike Cairns
The last major RACF project I architected was for something I presume would probably fit your clients bill here. Some of the necessary elements we incorporated were: Delegated (though not via RACF means) Ownership of all RACF general resource and dataset profiles - thereby making sure that

Re: RACF Automation (Cross Posted)

2024-01-26 Thread Allan Staller
Classification: Confidential Try Vanguard software. http://www.go2vanguard.com/ -Original Message- From: IBM Mainframe Discussion List On Behalf Of Bob Bridges Sent: Thursday, January 25, 2024 4:52 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: RACF Automation (Cross Posted) [CAUTION

Re: RACF Automation (Cross Posted)

2024-01-25 Thread Bob Bridges
ACF2 has since added full support for RACF-style groups, and some ACF2 shops have made the change to using those instead of UID strings. This was before that, though, and I'm pretty sure they handled it by storing, for each role, groups of UID strings. I don't remember the details of how that

Re: RACF Automation (Cross Posted)

2024-01-25 Thread Jon Perryman
On Thu, 25 Jan 2024 17:51:46 -0500, Bob Bridges wrote: >Back when my client in Ohio installed it, we called it "Sam-Jupiter". It appears that Beta Systems acquired the product and call it Beta-Access. https://www.betasystems.com/en/products/beta-access/ It also appears they removed

Re: RACF Automation (Cross Posted)

2024-01-25 Thread Bob Bridges
Back when my client in Ohio installed it, we called it "Sam-Jupiter". I don't know what the extra name implies. The client seemed content with their choice, although it was really designed to work with RACF and this is an ACF2 client. Also Sailpoint, but I think you mentioned that possibility

Re: RACF Automation (Cross Posted)

2024-01-25 Thread Jon Perryman
On Thu, 25 Jan 2024 10:15:57 -0600, Steve Beaver wrote: >I don't even know if the product still exists. -- The closest IVP that I know >of is OKTA. See if SAM (Security Administration Manager) still exists (possibly rebranded). The company no longer exists but I found

Re: RACF Automation (Cross Posted)

2024-01-25 Thread Steve Beaver
the couple hundred thousand to write and watch people retire. Steve -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Jon Perryman Sent: Thursday, January 25, 2024 10:07 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: RACF Automation (Cross

Re: RACF Automation (Cross Posted)

2024-01-25 Thread Jon Perryman
On Tue, 23 Jan 2024 12:39:47 -0600, Steve Beaver wrote: >I have a customer that would like to AUTOMATE RACF. Did you solve your problem? You need to clarify what AUTOMATE RACF means to the customer. What is the problem the customer is trying to solve because they can't mean automate.

RACF Automation (Cross Posted)

2024-01-23 Thread Steve Beaver
I have a customer that would like to AUTOMATE RACF. Personally I think this heresy but. I am aware of Sail Point, and it will automate changing passwords. Are there any tools/Program Products that can be used to Provision ID's, and Update profiles without having the auditors looking for