Knowledge document on using the '+' masking character.
Does TSS PERMIT(JOE) DSN(CCM+.) ACCESS(READ) match a dataset CCMP.ABCD?
Yes it does. The '+' is a wild card for one character. Since the dataset resource class is generic, generic prefixing can be used for resources.
So any dataset that starts with 'CCM', any one character, then a period is authorized to acid JOE with ACCESS(READ).
Masking characters are documented at: