RACF®, or an equivalent product, is used to control which source systems are authorized to initiate conversations with DFM. By setting up RACF resource class profiles, you can define which user IDs or groups are authorized to access DFM services. You can use RACF resource class profiles to define administrators with update authority to authorize access to DFM.

Once a conversation is initiated, DFM uses RACF services to control the actual data access as well. For more details, see Using RACF to Control Access to the Distributed FileManager TP.