DFSMSrmm allows you to set up authorization for the TSO subcommands that you use with DFSMSrmm. In addition to using STGADMIN.EDG resources in the FACILITY class, you can use ownership and RACF DATASET and TAPEVOL class resources to protect resources. You can use the DFSMSrmm parmlib OPTION COMMANDAUTH command to control how ownership and DATASET and TAPEVOL resources are used. You can also use the RACF name-hiding function that is provided by RACF. Use the RACF SETROPTS MLNAMES command to activate the name-hiding function. See Defining system options: OPTION for information about the DFSMSrmm parmlib OPTION COMMANDAUTH operand.

Set up the DFSMSrmm authorization and security to control access to the information in the DFSMSrmm control data set. You do not have to perform additional setup tasks for librarians and storage administrators because they typically have CONTROL access to STGADMIN.EDG.MASTER, which allows them to access all resources. To allow general users to access data sets and volumes that they do not own, set up authorization for the general user.

In general, when you use DATASET and TAPEVOL authorization instead of or as well as ownership you do not need to define additional resource profiles because the existing DATASET and TAPEVOL profiles are used. Using command authorization by data set name provides an additional check to determine who is authorized to access information about data sets and volumes in DFSMSrmm. DFSMSrmm checks OWNER profiles or DATASET or TAPEVOL profiles to determine ownership of the data and authorization to access the information.