Parameters

STCID=stcid

Required.
Specifies the Application Performance Analyzer started task identifier to be converted.

SYSNAMES=system_name | SYSNAMES=(system_name,system_name,....)

Required.
Specifies the target sysplex system name, or list of system names, for this Application Performance Analyzer instance. Up to 32 system names can be specified.
In a non-sysplex environment, the system name is the same as the name of the system where the observation request was made.

DSN=output_dataset_name

Optional.
Default: tsoprefix.CAZRACF.COMMANDS
Fully qualified data set names must be in quotes.
If not specified, the default data set will be created.
If specified and the specified data set does not exist, the data set will be created.
If the specified data set is a PDS, it must exist and the member name must be included. The member can be an existing or a new member.

CLASS=RACF_class

Optional.
Default: FACILITY
Specifies a RACF® class for the new profiles. Application Performance Analyzer now provides the option for a user-specified class for the external security profiles (see the SecurityClassName parameter in the CONFIG BASIC statement). This parameter allows the user to migrate the new profiles from the FACILITY class to the user-specified class in the CONFIG settings.

The CAZRACON utility will extract all the RACF profiles that contain the specified STCID prefix. From the extracted information, RACF RDEFINE commands are generated for defining the corresponding sysplex profiles. More specifically, for each extracted profile, new profiles are created with the system names replacing the STCID as the first qualifier. A profile is created for each sysname specified.

The FROM parameter is used on the RDEF command to copy the attributes of the old profile, including the authorization list.

Note: Be aware that the RDEF command with the FROM parameter does not guarantee that the new profile is identical to the old profile, minor differences can occur. See the IBM® z/OS® Security Server RACF Command Language Reference, (SA22-7687), for details.

RACF RDELETE commands are also generated to delete the old profiles. The RDEL commands are written as comments. Remove the comment characters /* before you submit the job.

Depending on the sysplex installation, duplicate RDEF commands can be generated for a specific system name. This can happen when the utility is run for multiple Application Performance Analyzer instances in the sysplex, and two or more of the instances have common target systems. In this case, you must decide which RDEF commands best suit your sysplex environment. Additionally, you might need to alter the authorization lists.