Backing up RACF discrete profiles for cataloged data sets

When DFSMShsm backs up a cataloged RACF-indicated data set, it optionally creates a RACF profile, called the backup profile. The original data set’s profile is a model for the backup profile, but the volume serial number is MIGRAT, which means the backup profile does not correspond to an existing data set. This eliminates the need for further updates to the backup profile when DFSMShsm moves the backup versions from an ML1 volume or backup volume to a daily or spill backup volume. After the backup profile is created, it does not have to be changed. DFSMShsm uses the backup profile for authorization checking during recovery if the discrete profile for the original data set no longer exists or if the authorization check against the original profile fails.

DFSMShsm also uses the backup profile for authorization checking during HALTERDS and HBDELETE processing if the authorization check against the original profile fails.

You use the PROFILEBACKUP or NOPROFILEBACKUP parameter of the SETSYS command to specify whether DFSMShsm creates backup profiles. If you specify PROFILEBACKUP, the backup prefix defined to DFSMShsm or the default backup prefix of HSM must be a user ID or group defined to RACF.

DFSMShsm maintains only one backup profile for each cataloged, RACF-indicated, VSAM or non-VSAM data set, no matter how many backup versions of the data set are maintained. The backup profile is always associated with the latest backup version of a data set that was RACF-indicated and cataloged at the time of backup. If you delete the latest backup version of a cataloged, RACF-indicated data set through the BDELETE or HBDELETE command, the backup profile is transferred to the next latest backup version of the data set that was made from a RACF-indicated, cataloged data set. DFSMShsm does not create backup profiles when it backs up uncataloged data sets.

If the DFSMShsm-started procedure is not associated with a RACF user ID, the user and group names in the backup profile will be “*”.

DFSMShsm backs up cataloged, RACF-indicated data sets even if a backup profile is not created or transferred.