Protecting DFSMShsm data sets

You can protect DFSMShsm data sets with a generic data set profile. At least one generic data set profile must be created of the form 'uid.**'. Example: If you have chosen DFHSM as the high-level qualifier (UID field in Starter set example), use the following commands to create the data set profile:

If you specify . . .	Then . . .
SETROPTS GENERIC(*)	Activates generic profile checking for the DATASET class plus all the classes in the class descriptor table except grouping classes.
ADDGROUP (DFHSM)	Adds the RACF® group DFHSM.
ADDSD 'DFHSM.**' UACC(NONE)	RACF creates a generic profile that provides security for all data sets beginning with DFHSM.

After you have created a profile for protecting DFSMShsm data sets, you must authorize some users to access the data sets protected by the profile. A user is authorized to a given profile either by adding the user to the access list or to a group specified in the profile. A user is added to a group with the CONNECT command, see Authorizing users to access DFSMShsm resources for more information. For more information about generic resources, refer to z/OS DFSMShsm Storage Administration.