DFSMSdss does not perform any explicit security-level, security-category, or security-label (SECLABEL) checking. For example, SECLABELs are not dumped or restored unless they are embedded within the data itself such as zFS data sets. However, DFSMSdss and the system services it uses (such as allocation) call RACF® to make authorization checks that can result in access being denied because of a mismatch between the security level, security category, or security label of the resource and that of your user ID.