Your installation can use entries in the global access checking table to permit, but not deny, access to data sets. Only data set profiles can be used to deny access to data sets. Each entry in the table should have a corresponding generic profile to ensure consistent processing results.