To see permits specifically for DATASET(SYS1.ABC123), put the dataset name in quotes or use DATA(LITERAL) on the WHOHAS command: If using the quotes, be sure CA Top Secret r15 fix RO52490 is applied first to correct a problem where the output with the resource name in quotes matches the output without the quotes.
TSS WHOHAS DATASET('SYS1.ABC123')
TSS WHOHAS DATASET(SYS1.ABC123) DATA(LITERAL)
TSS WHOHAS DATASET('SYS1.ABC123') should show the shorter matches such as SYS1.*, SYS0.*B, etc but not show the longer resource names such as SYS1.*.USER.XYZ789.
TSS WHOHAS DATASET(SYS1.ABC123) DATA(LITERAL) should show the acids that are permitted to exactly SYS1.ABC123. It will not show anything like SYS1.*, SYS1.*L, etc that would be a match.