To act as a DFSMSdss-authorized storage administrator, specify the ADMINISTRATOR keyword on the appropriate DFSMSdss command. DFSMSdss-initiated access checking to data sets and catalogs is bypassed. If you are not authorized to use the ADMINISTRATOR keyword, the command ends with an error message.

Note that certain authorization checking to RACF® for data sets is unavoidable, regardless of whether the ADMINISTRATOR keyword is specified. For example, checks that are necessary to determine whether a data set has a defined RACF profile, or authorization checks that are initiated by callable services or utilities that DFSMSdss invokes such as Catalog and IEBCOPY, cannot be bypassed.

As a DFSMSdss-authorized storage administrator, your authority is for both physical and logical operations. For example, a DFSMSdss-authorized storage administrator for the COPY command can copy tracks, a full volume, or data set without having access to the individual data sets or their catalogs.

DFSMSdss tries to define a discrete profile when you copy a discretely-protected data set or when you use the MENTITY keyword. The authority to do so is not given to you by the DFSMSdss ADMINISTRATOR support. For example, to define or rename a discrete profile for a user data set that you do not own, you also need the system-OPERATIONS attribute. The ADMINISTRATOR support also does not give you authority to bypass checking for MGMTCLAS and STORCLAS authority.

Storage class and Management class authorization checking can be bypassed for logical and physical data set restore and physical data set copy processing by using the ADRPATCH Serviceability Aid in conjunction with the ADMINISTRATOR keyword.

Related reading: For more information about the ADRPATCH Serviceability Aid, see DFSMSdss patch area.