With the SEPCIAL authorisation, you don't get access to all resources, but, you can give yourself any authorisation you like... (or change any other RACF setup)
The OPERATIONS attribute is what VMBACKUP needs: RAC ALU VMBACKUP OPERATIONS. When a user with OPERATIONS accesses a resource, RACF will write a record in its SMF logfile, so be prepared for the log disks to fill quicker. But, as you say you gave VMBACKUP R/O access to all minidisks, VMBACKUP won't be able to restore to minidisks. RACF uses the most restrictive permission: so if an explicit permission for VMBACKUP exists, RACF uses that, if not, RACF will find the OPERATIONS attribute and grant R/W permission. Kris, IBM Belgium, VM customer support
