Access authority for general resources

These definitions apply both to UACC authority and to authority granted to individual users or groups in the resource profile access list.

The UACC is the default resource-access authority. All users or groups of users in the system who are not specifically named in an access list of authorized users for that resource can still access the resource with the authority specified by the UACC. The UACC also applies to users not defined to RACF®.

Note: These access authorities can have different meanings depending on the general resource they are protecting. z/OS Security Server RACF Security Administrator's Guide describes the meaning of the access authorities for each kind of general resource. Additional information should be found in the reference materials for the specific product.

The resource access authorities are:

ALTER: Specifies that the user or group have full control over the resource.
CONTROL: Is used only for VSAM data sets and specifies that the user or group have access authority that is equivalent to the VSAM control password.
UPDATE: Specifies that the user or group be authorized to access the resource for the purpose of reading or writing.
READ: Specifies that the user or group be authorized to access the resource for the purpose of reading only.
EXECUTE: Specifies that the user or group can run programs but not read or copy them.
NONE: Specifies that the user or group not be permitted to access the resource.