A RACF function with which an installation can control who can run RACF-controlled programs. See also dirty address space.