A DD statement that contains a PROTECT parameter to establish RACF® protection for a direct access data set must:

• Name a permanent data set in the DSNAME parameter.
• Specify a status of DISP=NEW or MOD treated as NEW. RACF can establish protection only when the data set is being created.