Qualifiers

/ACL[=(ace[,...])]
   Specifies one or more access control entries (ACEs) to be
   modified. When no ACE is specified, the entire access control
   list (ACL) is affected. Separate multiple ACEs with commas and
   enclose the list in parentheses. The specified ACEs are inserted
   at the beginning of the ACL unless the /AFTER qualifier is used.

/AFTER=ace
   Indicates that all access control entries (ACEs) specified with
   the /ACL qualifier are added after the ACE specified with the
   /AFTER qualifier. By default, any ACEs added to the access control
   list (ACL) are always placed at the top of the list.

/CONFIRM
   Controls whether CMS prompts you for confirmation before each
   transaction.

   When you specify /CONFIRM and run CMS in interactive mode, CMS
   prompts you for confirmation. If you type YES, ALL, TRUE, or 1,
   CMS executes the transaction.  If you type NO, QUIT, FALSE, 0,
   or press RETURN or CTRL/Z, no action is performed. If you type 
   any other character, CMS continues to prompt until you type an 
   acceptable response.

   CMS does not prompt for confirmation in batch mode.

/DEFAULT
   Creates an ACL for one or more specified objects as if the object
   were newly created. The /DEFAULT qualifier propagates the DEFAULT
   option ACEs in the ACL of the entity list to the ACL of the
   specified object. This qualifier can be used only with an object
   that is a library entity, that is, either an element, class, or
   group.

/DELETE
   Indicates that the access control entries (ACEs) specified with
   the /ACL qualifier are to be deleted. If no ACEs are specified
   with the /ACL qualifier, the entire ACL is deleted. If the /ACL
   qualifier specifies an ACE that does not exist in the ACL of the
   specified object, you are notified that the ACE does not exist,
   and the delete operation continues on to the next ACE on the ACL,
   if any exists.

/LIKE=object-specification
   Indicates that the ACL of the specified object is to replace the
   ACL of the object or objects specified with SET ACL. Any existing
   ACEs are deleted before the ACL specified by /LIKE is copied.

   The type of the source and destination objects must be the same.
   No wildcard characters are allowed in the /LIKE parameter.

/LOG (D)
   Controls whether CMS displays success and informational messages
   on the default output device. By default, if the command executes
   successfully, CMS displays a success message. If you specify
   /NOLOG, success and informational messages are suppressed. Any
   warning, error, or fatal error messages are displayed regardless
   of whether /LOG or /NOLOG is specified.

/NEW
   Indicates that any existing ACEs in the ACL of the object
   specified with SET ACL are to be deleted. To use the /NEW
   qualifier, you must specify a new ACL or ACE with the /ACL
   qualifier.

/OBJECT_TYPE=type
   Specifies the type of the object whose ACL is being modified.
   There is no default object type; therefore, this qualifier is
   required. The type must be one of the following keywords:

      CLASS
      ELEMENT
      GROUP
      LIBRARY
      COMMAND

/OCCLUDE[=option,...]
   Controls whether CMS selects the first instance of the specified
   object, or all instances of the specified object in the library
   search list. The options field contains one or more keywords
   associated with the name of the object. The options field can
   contain the following keywords:

      ALL--equivalent to (ELEMENT, GROUP, CLASS, OTHER)
      ELEMENT (D)
      NOELEMENT
      GROUP (D)
      NOGROUP
      CLASS (D)
      NOCLASS
      OTHER (D)
      NOOTHER
      NONE--equivalent to (NOELEMENT, NOGROUP, NOCLASS, NOOTHER)

   You can specify either ALL or NONE, or any combination of the
   [NO]ELEMENT, [NO]GROUP, [NO]CLASS, and [NO]OTHER keywords.

   By default, CMS performs occlusion for all objects; that is, CMS
   selects only the first occurrence of a specified object.

/REPLACE=(ace[,...])
   Deletes the access control entries (ACEs) specified with the /ACL
   qualifier and replaces them with those specified with /REPLACE.
   Any ACEs specified with the /ACL qualifier must exist and must be
   specified in the order in which they appear in the current ACL.