Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

Clear

RACF

Showing 193

Connect command shouldn't have a default owner

Problem When you do connects in RACF and don't specify an owner it will default to the user id of whoever executed the command, this should be changed as it is not secure and can negatively affect uptime. This becomes an issue if a security admini...
7 months ago in z/OS / RACF 3 Not under consideration

Enhance IRRXUTIL/R_admin to support DIGTCERT/DIGTCERT

I would like to see the R_admin/IRRXUTIL interface enhanced to support the "non-standard" RACF classes DIGTCERT and DIGTRING, this would allow administrators to extract all digital certificate info using IRRXUTIL without needing to rely on using I...
about 3 years ago in z/OS / RACF 4 Not under consideration

RACF DELGROUP FORCE, and message enhancements

The usability of the RACF command DELGROUP could be improved. Also the error messages are useless and inaccurate. I want to be able to run a script to define RACF resources, and have a script to clean up. For most resources I can do this. I cannot...
about 4 years ago in z/OS / RACF 2 Not under consideration

Add ability to place comment in auditing of RACF commands

Would like capability to add a comment type keyword on any RACF commands and have that text written to SMF record "as is". Using a new keyword common to all RACF commands. Expected typical usage will be a reason text or tracking number.
almost 8 years ago in z/OS / RACF 4 Not under consideration

RACF panel Display Sys Options results in Open for Output rather than input

Due to Audit requirements, we monitor datasets that are deemed critical to determine who has accessed those critical datasets and whether it is an acceptable/authorized access. We have noticed that our reports have been reporting access to the 'SY...
almost 10 years ago in z/OS / RACF 2 Not under consideration

Allow Auditing by RACF Group

Allow auditing by RACF group. I need to audit accesses made by a specific RACF group.
almost 10 years ago in z/OS / RACF 2 Not under consideration

Check that RVARY password is regularly changed by administrator

In order to keep systems secure and avoid static unchanged password for RVARY commands it would be nice if we could audit the fact when RVARY password was last changed. In past it was visible that hash in RCVT changed, for security reasons is no l...
5 months ago in z/OS / RACF 3 Not under consideration

RLIST for specific profile '*'

The RLIST command treats the asterisk as a wildcard. If a profile is named '*' then the command will list all profiles not just that one. Please enhance the RLIST command to allow the list of one specific profile especially a profile named '*'
almost 4 years ago in z/OS / RACF 3 Not under consideration

RACF command LISTDSD DSNS not working for master catalog

Currently RACF is designed to exclude the master catalog dataset name from LISTDSD DSNS output under "CATALOGUED DATA SETS AFFECTED BY PROFILE CHANGE".
about 5 years ago in z/OS / RACF 1 Not under consideration

Display command or healthcheck for RACF use of IRRPRMxx

We are currently converting RACF from ICHRDSNT modules to using parmlib member IRRPRMxx. While this works as designed there is no way to verify after the fact (if the historical IPL syslog/operlog is not available) if RACF is using the ICHRDSNT or...
over 5 years ago in z/OS / RACF 4 Not under consideration