Permissions allowed for IBMFAC even though access(none)

Products

• Top Secret

Issue/Introduction

How to prevent a user from creating Pervasive Encryption datasets?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

To deny access the ability to create encrypted dataset in z/OS is located in IBM documentation on Setting up data set encryption:

TSS PERMIT(acid) IBMFAC(STGADMIN.SMS.ALLOW.DATASET.ENCRYPT) ACCESS(NONE)