RACF is a component of the Security Server for z/OS and is used to protect resources. RACF provides security by identifying and verifying users, authorizing users to access protected resources, and recording and reporting access attempts.