You can disallow generic profiles in a resource class. For a dynamic class that you define yourself, see Defining a dynamic class with generics disallowed. For a static class, your system programmer can define the class in the installation CDT by executing the ICHERCDE macro using the GENERIC=DISALLOWED parameter. (See z/OS Security Server RACF Macros and Interfaces for information about using the ICHERCDE customization macro.)

Before you request a static class defined with GENERIC=DISALLOWED, determine whether the new class shares a POSIT value with other classes. If so, ensure that all other classes sharing the POSIT value also have GENERIC=DISALLOWED for static classes or GENERIC(DISALLOWED) for dynamic classes.