There is a IBM supplied REXX EXEC izudflt.cfg.rexx used to generate RACF commands for z/OSMF configuration.
Knowledge Base Article TEC614236 documents the ACF2 conversion of this REXX EXEC.
Link: https://comm.support.ca.com/?legacyid=TEC614236
For those of you now embarking on getting this set-up under CA ACF2 - see Document ID : KB000011540
'What is required for ACF2 for setup of z/OSMF 2.1?'
Link: https://comm.support.ca.com/kb/what-is-required-for-acf2-for-setup-of-zosmf-21/kb000011540