RACF® FACILITY class profiles, both generic and discrete, can be used to allow access to all DFSMShsm commands. If the RACF FACILITY class is active, DFSMShsm always uses it to protect all DFSMShsm commands. If the RACF FACILITY class is not active, DFSMShsm uses the AUTH command to protect all DFSMShsm commands. The storage administrator must work with the security administrator to give authorization to user and storage administrator commands.
For more information about using the RACF FACILITY class environment and the AUTH command environment, see z/OS DFSMShsm Implementation and Customization Guide.