Integrate RACF into ADMIN tool

Thank you for submitting this Db2 Administration Tool for z/OS enhancement request. We have reviewed this request and believed it was a good candidate for the Db2 Administration Tool for z/OS product and have implemented it.
<APAR information>

PH64720

PH65355

We appreciate your input to the Db2 Administration Tool for z/OS development team. We hope that you will continue to submit enhancement suggestions for improvements as customer feedback is a key component to shaping the future direction of Db2 Administration Tool for z/OS.

Sincerely,

The Db2 Administration Tool for z/OS Team

APAR PH65355 for Db2 Administration Tool for z/OS recently released support for:

This APAR provides new TCz options "RACF Security Scope", "Class
Name Root", and "Class Name Suffix", available in Db2 Parameters
TCz menu, to customize the product according to the current RACF
setup.

RACF support is being delivered in multiple APARs.

APAR PH64720 for Db2 Administration Tool for z/OS recently released support for:

1) New TCz option "RACF Security for Db2 Enabled" 

2) New line command RL (RLIST) on catalog panels for all object
types supported by RACF to display access levels of the current 
user to the available RACF profiles (RLIST)

3) New line command RLA (RLIST AUTH) on catalog panels for all
object types supported by RACF to display access lists of the
available RACF profiles

4) New primary commands RL and RLA on the ADB2AZ panel 
(Db2 System Privileges Authorization). RL displays access levels
to the available RACF system authorization profiles for the 
current user. RLA displays access list to the available RACF 
system authorization profiles for  the current user. New panels 
ADB2AZR1 and ADB2AZR1 (RACF System Privileges Authorizations) 
display this information.

5) New line command PE on the RACF authorization panels 
to generate a RACF PERMIT command prototype

This item was discussed as an important feature for the near term in the CAC meeting on 2023-08-23. We will be evaluating the import of this in the near future.

at Swiss Re we created views called RACF.SYSUSERAUTH and RACF.SYSTABAUTH presenting the same information from RACF as the SYSIBM.%AUTH views for DB2 but using the RACF data and also list the profile as a column. (Unload of the RACF database and DB2 classes and loaded in DB2)

Admin could provide the same but directly query RACF via RLIST commands and using commands like RUA and RTA for example would be better as it is realtime and there would be no latency between the unload and load as in our example.