Protect the control data set by ensuring that a RACF DATASET profile protects it. To prevent inadvertent updates to the control data set, specify a RACF universal access of NONE. Give READ access to users running the inventory management backup function, and give UPDATE access to users running any other backup procedure. Give CONTROL access only to users authorized to perform functions independent of the subsystem, such as restoring and reorganizing the control data set and using program EDGUTIL. Give CONTROL access to the RACF user ID assigned to the DFSMSrmm procedure in Step 9: Assigning DFSMSrmm a RACF user ID.