For data sets that are DEFINEd with the EXCEPTIONEXIT, or programs that specify the SYNAD parameter on allocation, the following error occurs with the VSAM file.
IEC161I 040(001)-053,job,step,VSAM,,,
IEC161I dsn clus,dsn data,
IEC161I usercat.xxx
IBM introduced a new option in z/OS 2.2 for VSAM with IBM OA46090/UA75830 changes for VSAM EXCEPTIONEXIT,
- z/OS 2.2
- z/OS 2.1 and 1.13 with APAR OA46090 applied
So the ACID needs READ access to the resource IDA.VSAMEXIT.xxxxxxxx in the IBMFAC resource class where xxxxxxxx is the EXITNAME parameter value of EXCEPTIONEXIT or SYNAD parameter.
TSS ADD(dept) IBMFAC(IDA)
TSS PER(acid) IBMFAC(IDA.VSAMEXIT.exitname) ACC(READ)
This changed with UA75830.
Please see the information from the z/OS 2.2 Migration manual:
DFSMSdfp: Define a security profile for VSAM exception exits