ERQ by ASPG is an ISPF-driven solution designed to enhance the capabilities of IBM's Resource Access Control Facility (RACF). It simplifies RACF administration by managing user IDs, delegating user privileges, generating complex commands, and running customized reports. ERQ builds commands for functions like CLONE, DELETE, LIST, REPLICATE, CHANGE OWNER, CHANGE NOTIFY, REMOVE NOTIFY, and REMOVE CONNECTION, allowing for optional editing and execution via the RUN command with a single keystroke. Commands can be manually or automatically executed, and ERQ administrators may format, edit, or execute commands without requiring ISPF skeleton members or hardcoding in CLIST and REXX procedures. It supports Universal Groups and PROTECTED or RESTRICTED user attributes, as well as the processing of Residue IDs. ERQ assists in eliminating RACF database clutter and vulnerabilities caused by inefficient or inexperienced administration. It integrates with IBM’s Health Checker for z/OS and homegrown health checker systems to assist system operators with the discovery and diagnosing of RACF issues. ERQ enables administrators to write custom applications and procedures more efficiently while allowing parties other than systems programmers and administrators to utilize these customizations with little to no training. It offers a library of sample executable applications that users can modify to suit their environment without needing advanced programming knowledge in languages like CARLa and COBOL. ERQ automates the entire security administration process, offering unique online functions not found in other third-party tools. ERQ's reporting features aid in security and compliance tasks, providing standard reports on users, groups, connections, data sets, and resources. By utilizing ERQ, organizations ensure a qualified RACF operator is available for security priorities, allowing RACF tasks to be managed by more end users. ERQ generates customizable reports to audit RACF events and identify security violations and changes.
