RACF Surrogate access returns revoked status for good users OM Web Viewer 14.0

Products

• Output Management Web Viewer

Issue/Introduction

Anyone in my mainframe support RACF group can logon to the viewer and access output from backend repositories at will without issue. I created a few repository groups and added WEBVWR.GROUP profiles for each and got a user group added to the profile with READ auth, however when a member of this group tries to logon, they get a message back sharing their RACF id is revoked, when it really isn't.  Here are return code/reason codes being returned:

CAHVS0098D processJ2ZReturnedMessages message #0 variable #0: UID
CAHVS0098D processJ2ZReturnedMessages message #0 variable #1: 0
CAHVS0098D processJ2ZReturnedMessages message #0 variable #2: -1
CAHVS0098D processJ2ZReturnedMessages message #0 variable #3: 163
CAHVS0098D processJ2ZReturnedMessages message #0 variable #4: 199755808
CAHVS0262E Logon (guid) failed (returnValue -1, returnCode 163, reasonCode 199755808) for user UID
CAHVS0251E Invalid Credentials                                                       

This issue is only occurring for users who aren't in our mainframe support group.  From what I can tell, all of the FACILITY and SURROGAT resources have been defined correctly to allow data to be pulled back from the repositories, but there has to be something that my id has access to that a regular user doesn't.  

Environment

• OM Web Viewer for z 
• Output Management Web Viewer™ for z/OS 14.0

Cause

READ access to the APPL class resource OMVSAPPL hadn't been setup for the group

Resolution

Once READ access to the APPL class resource OMVSAPPL was setup for the group users could log in.