User data set

The high-level qualifier of the name of a user data set is a RACF-defined user ID. As a RACF-defined user, you can protect your own data sets. However, when you use DFSMSdss to discretely protect a data set for another user, you need the system-OPERATIONS attribute.

Usually, you can use DFSMSdss to create new user data sets if you own them or have ALTER access to them through a data set profile or an entry in the global access checking table. You can also create a new user data set in any of the following situations:

You are acting as a DFSMSdss-authorized storage administrator through the ADMINISTRATOR keyword.
You have DASDVOL-access authority to the non-SMS-managed volume that the data set is being created on.
You have the system-OPERATIONS attribute, and you have not been explicitly denied access to the data set.
The system has always-call, the data set name is protected by a generic profile, and you do not have Automatic Data Set Protection (ADSP).
The data set is not protected by a generic profile, and you do not have ADSP.

Related reading: For more information about always-call, refer to Protect-all and always-call. For more information about ADSP, refer to Automatic data set protection (ADSP) attribute.