Your installation can provide RACF® protection for new tape data sets by using one or
more of the following methods.
- A user can specify PROTECT=YES on the JCL DD statement when
creating a new tape data set.
RACF builds
a discrete profile for the newly created data set and the tape volume
on which the data set resides (unless the tape volume is already defined
with the TVTOC option).
When TAPEDSN and TAPEVOL are both active,
a discrete data set profile is defined. If the tape volume profile
already exists, the TVTOC is updated. If the tape volume profile does
not already exist, RACF defines
an automatic tape volume profile with a TVTOC.
When TAPEDSN
is not active and TAPEVOL is active, a discrete TAPEVOL profile is
defined.
- You can assign the ADSP attribute to a user and issue the SETROPTS
ADSP command.
When the user
creates a new tape data set, RACF automatically
builds a discrete profile for the data set as well as the tape volume
on which the data set resides (unless the tape volume is already defined
with the TVTOC option).
z/OS Security Server RACF Security Administrator's Guide
Copyright IBM Corporation 1990, 2014