You can protect certain DFSMSdss commands and keywords against unauthorized use by defining the appropriate RACF® FACILITY class profile. DFSMSdss invokes RACF checking to ensure that users have sufficient authority to perform the function.

Related reading: For additional information about the FACILITY class profiles used by DFSMSdss, see the z/OS DFSMSdfp Storage Administration.