z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Protecting existing data on tape (SETROPTS TAPEDSN in effect)

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

To protect an existing data set on a tape volume, issue the ADDSD command with the TAPE operand. (This requires that the TAPEDSN option be in effect.) If the data set is cataloged, you need to specify only the data set name.

The following example shows how to protect a cataloged tape data set named USER01.TEST.DATA:
ADDSD 'USER01.TEST.DATA' TAPE

If the cataloged tape data set resides on more than one volume (a multivolume tape data set), RACF® uses the data set name specified on the ADDSD command and the information supplied in the catalog to protect the data set on all of the volumes on which it resides.

To protect an existing tape data set that is uncataloged, issue the ADDSD command with the TAPE operand and specify:
  • The data set name
  • The tape volume on which the data set resides
  • The unit name
  • The file sequence number of the data set on the tape
For example, suppose you want to protect an uncataloged tape data set named USER03.TEST.DATA with a discrete RACF profile. The data set resides on a tape volume labeled 123456 and has a file sequence of 1. To protect this data set, enter:
ADDSD 'USER03.TEST.DATA' TAPE UNIT(TAPE) VOLUME(123456) FILESEQ(1)

From this information, RACF builds a discrete profile for both the data set and the tape volume. When you issue the ADDSD command to protect an existing tape data set, RACF creates an automatic tape volume profile. For more information, see Tape volume profiles that contain a TVTOC.

Note that when you issue the ADDSD command to RACF-protect an uncataloged tape data set, you protect that data set only on the volume that you specify.

If you have an uncataloged tape data set that resides on more than one volume, you can RACF-protect this data set with a discrete profile using several commands. For example, suppose you want to RACF-protect a tape data set named USER02.TEST.DATA that resides on volumes 111111 and 222222.
  1. To protect that portion of the data set residing on volume 111111, issue the ADDSD command:
    ADDSD 'USER02.TEST.DATA' TAPE UNIT(TAPE) VOLUME(111111) FILESEQ(1)
  2. To protect that portion of the data set residing on volume 222222, issue the ALTDSD command with the ADDVOL operand as follows:
    ALTDSD 'USER02.TEST.DATA' ADDVOL(222222)
    Note:
    1. You can protect only one volume at a time with the ALTDSD command and the ADDVOL operand. If your data set resides on more than two volumes, issue the ALTDSD command and specify the appropriate volume on the ADDVOL operand for each additional volume. For a tape data set with an entry in the TVTOC, the maximum number of volumes the data set can span is 42.
    2. Before you can use the ALTDSD command to protect a portion of a multivolume data set, at least one other portion of that data set must already be RACF-protected.
    3. RACF ignores this command if you specify a generic profile name for the data set.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014