A security administrator or resource owner can control access to resources by creating a discrete profile, which protects one resource, or a generic profile, which protects one or more resources. Each profile has a defined, universal access level and an access list that permit user and group IDs specific levels of access authority. When profiles control resources, DFSMSdss usage can be restricted.