RACF
Also known as: Resource Access Control Facility
The most common external security manager on z/OS. Holds users, groups and profiles, and decides every access. ACF2 and Top Secret do the same job differently.
See it in context
Security and RACF fundamentals: Users, groups and profiles