Python interface into the RACF management application programming interface.

>>> from pyracf import UserAdmin
>>> user_admin = UserAdmin()
>>> user_admin.get_omvs_uid("squidwrd")
2424
>>> user_admin.set_omvs_uid("squidwrd", 1919)
>>> user_admin.get_omvs_uid("squidwrd")
1919

Description

As automation becomes more and more prevalent, the need to manage the security environment programmatically increases. On z/OS that means managing a security product like the IBM Resource Access Control Facility (RACF). RACF is the primary facility for managing identity, authority, and access control for z/OS. There are more than 50 callable services with assembler interfaces that are part of the RACF API.

RACF callable services interfaces

While there are a number of languages that can be used to manage RACF, (from low level languages like Assembler to higher level languages like REXX), the need to have it in a language that is used to manage other platforms is paramount. The pyRACF project is focused on making the RACF management tasks available to Python programmers. This will make it easier to manage RACF from management tools like Ansible and Tekton.

Getting Started

Dependencies

• z/OS 2.4 and higher.
• R_SecMgtOper (IRRSMO00): Security Management Operations.
• The appropriate RACF authorizations

Installation

⚠️ pyRACF will eventually be made available on pypi.org, but currently python wheel distributions for pyRACF are only available for manual download and installation via GitHub.

• Download & Install From GitHub

Usage

• pyRACF Documentation

Help

• Github Discussions

Authors

• Joe Bostian: jbostian@ibm.com
• Frank De Gilio: degilio@us.ibm.com
• Leonard Carcaramo: lcarcaramo@ibm.com
• Elijah Swift: Elijah.Swift@ibm.com