Define the data set profiles

READ access for users and ALTER for system programmers is sufficient for most z/OS® Explorer data sets. Replace the #sysprog placeholder with valid user IDs or RACF® group names. Also, ask the system programmer who installed and configured the product for the correct data set names. FEK is the default high-level qualifier used during installation and FEK.#CUST is the default high-level qualifier for data sets created during the customization process.

ADDGROUP (FEK) OWNER(IBMUSER) SUPGROUP(SYS1) 
DATA('IBM Explorer for z/OS – HLQ STUB')

ADDSD  'FEK.*.**' UACC(READ) 
DATA('IBM Explorer for z/OS')

PERMIT 'FEK.*.**' CLASS(DATASET) ACCESS(ALTER) ID(#sysprog)

```
SETROPTS GENERIC(DATASET) REFRESH
```

Note:

Protect FEK.SFEKAUTH against updates because this data set is APF-authorized. The same is true for FEK.SFEKLPA, but here because this data sets is program controlled.
The sample commands in this publication and in the FEKRACF job assume that Enhanced Generic Naming (EGN) is active. When EGN is active, the ** qualifier can be used to represent any number of qualifiers in the DATASET class. Substitute ** with * if EGN is not active on your system. For more information about EGN, see Security Server RACF Security Administrator's Guide (SA22-7683).