No matter if you have a second-level z/VM test system or a full-on Production z/VM host, you had better have an External Security Manager. The RACF security server gives you a much higher level of security than CP can. But how does it "work" and why is it so scary - or painful - for a lot of z/VM system administrators? In this session, the speaker will cover the basic terminology, RACF commands that should be learned to manage basic resources and pit-falls to avoid and overcome.