RACF and PSF (Print Services Facility)

If Print Services Facility™ for z/OS® is installed, and the SECLABEL class is active, you can control how printed output is affected as follows:

The separator pages (the job header and trailer) are always printed with the PSF identification label associated with the security label of the user data and cannot be falsified by a user. Printing of separator pages can be suppressed by the operator or the system programmer, but not by the print-job submitter.
Data page labeling is in effect for the user data pages. This means that the PSF identification label associated with the security label of the user data is printed on all pages of printed output. By granting READ access to the PSF.DPAGELBL resource in the PSFMPL class, you can selectively allow users to stop the printing of PSF identification labels in printed output.
On certain printers, end user data can be printed only in a system-defined user printable area. This function allows the PSF identification label to print end use data outside the system-defined user printable area.

Note: PSF print labeling support depends on the type of printer being used.

For specific information on PSF printers and information on using RACF® to provide security for PSF, see PSF for z/OS: Security Guide.