The RACF facility by which a security administrator can control access to fields or segments in a RACF profile.