RACF®

You can protect the VTOC and VTOC index using the Resource Access Control Facility (RACF®), a component of the Security Server for z/OS®, by defining the volume serial entity under the RACF DASDVOL class. For you to modify a protected VTOC and VTOC index, programs must be authorized at the following levels:

UPDATE level to open for output processing a VTOC or any data set with a name beginning with SYS1.VTOCIX.
ALTER level to allocate, rename, or scratch any data set with a name beginning with SYS1.VTOCIX or to rename a data set to a name beginning with SYS1.VTOCIX.

Neither the VTOC nor the VTOC index is protected from being opened for input processing by the DASDVOL/volume serial entity. Neither the VTOC nor the VTOC index can be protected through the RACF DATASET class. For additional information on using RACF, see z/OS Security Server RACF Security Administrator's Guide z/OS Security Server RACF Security Administrator's Guide z/OS Security Server RACF Security Administrator's Guide.