Your installation can put DFSMSdss in a protected library to restrict its use. Your installation can also limit the use of certain DFSMSdss commands, functions, and keywords by defining resource profiles in the FACILITY class and restricting access to those profiles. To use a protected command, function, or keyword, you need READ access authority to the applicable profile.

Table 1 lists those keywords and functions, and their associated RACF® FACILITY class profiles. For information about the ADMINISTRATOR keyword, see FACILITY class profiles for the ADMINISTRATOR keyword.

Table 1. DFSMSdss FACILITY Class Profiles. This table maps the DFSMSdss keywords and functions to their associated FACILITY class profiles.

Keyword or Function	Profile Name
BYPASSACS with COPY	STGADMIN.ADR.COPY.BYPASSACS
BYPASSACS with RESTORE	STGADMIN.ADR.RESTORE.BYPASSACS
CGCREATED	STGADMIN.ADR.CGCREATE
CONCURRENT with COPY	STGADMIN.ADR.COPY.CNCURRNT
CONCURRENT with DUMP	STGADMIN.ADR.DUMP.CNCURRNT
CONSOLIDATE	STGADMIN.ADR.CONSOLID
CONVERTV	STGADMIN.ADR.CONVERTV
DEFRAG	STGADMIN.ADR.DEFRAG
DELETECATALOGENTRY with RESTORE	STGADMIN.ADR.RESTORE.DELCATE
FCCGFREEZE with COPY	STGADMIN.ADR.COPY.FCFREEZE
FCSETGTOK with COPY	STGADMIN.ADR.COPY.FCSETGT
FCTOPPRCPRIMARY with COPY	STGADMIN.ADR.COPY.FCTOPPRCP
FCTOPPRCPRIMARY with DEFRAG	STGADMIN.ADR.DEFRAG.FCTOPPRCP
FlashCopy® with COPY	STGADMIN.ADR.COPY.FLASHCPY
FlashCopy with CONSOLIDATE	STGADMIN.ADR.CONSOLID.FLASHCPY
FlashCopy with DEFRAG	STGADMIN.ADR.DEFRAG.FLASHCPY
IMPORT with RESTORE	STGADMIN.ADR.RESTORE.IMPORT
INCAT(catname) with COPY	STGADMIN.ADR.COPY.INCAT
INCAT(catname) with DUMP	STGADMIN.ADR.DUMP.INCAT
INCAT(catname) with RELEASE	STGADMIN.ADR.RELEASE.INCAT
NEWNAMEUNCONDITIONAL with DUMP	STGADMIN.ADR.DUMP.NEWNAMEU
PROCESS(SYS1) with COPY	STGADMIN.ADR.COPY.PROCESS.SYS
PROCESS(SYS1) with DUMP	STGADMIN.ADR.DUMP.PROCESS.SYS
PROCESS(SYS1) with RELEASE	STGADMIN.ADR.RELEASE.PROCESS.SYS
RESET with DUMP	STGADMIN.ADR.DUMP.RESET
RESET with RESTORE	STGADMIN.ADR.RESTORE.RESET.YES
SET PATCH	STGADMIN.ADR.PATCH
TOLERATE(ENQF) with COPY	STGADMIN.ADR.COPY.TOLERATE.ENQF
TOLERATE(ENQF) with DUMP	STGADMIN.ADR.DUMP.TOLERATE.ENQF
TOLERATE(ENQF) with RESTORE	STGADMIN.ADR.RESTORE.TOLERATE.ENQF
ZCOMPRESS with DUMP	STGADMIN.ADR.DUMP.ZCOMPRESS

Related reading: For more information about FACILITY class profiles, see z/OS Security Server RACF Security Administrator's Guide.