(1) The security label that RACF uses in RACF authorization checking if the SECLABEL class is active.
(2) For batch jobs on MVS, the security label specified in the SECLABEL parameter of the JOB statement, or (if no security label was specified) the default security label in the user profile associated with the job.
(3) For TSO users, the security label specified when the user logged on, or (if no security label was specified) the default security label in the user's user profile.