Assigning Security Labels to Users

Just one security label (the default) can be stored in the user profile.

As security administrator, you should specify a default security label for each user that might need access to resources protected by security labels. To specify a user's default security label, enter the ADDUSER or ALTUSER command with the SECLABEL operand specified. You must also give each such user authority to use the security label. To give a user authority to use a security label, use the PERMIT command. For example: 
ALTUSER  userid  SECLABEL(security-label)

PERMIT   security-label  CLASS(SECLABEL)
         ID(userid)  ACCESS(READ)
Note:
  1. On z/VM®, you can use the RACF® ISPF panels to generate an EXEC using the SEARCH command with the CLIST operand.