At CICS startup there are ACF2 violations for userid.DFHSTART. What needs to be done?

Products

• ACF2
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

When CICS starts, there are ACF2 violations for userid.DFHSTART.  The resource call is for class SURROGAT.  What needs to be done?
 
ACF04056 ACCESS TO RESOURCE TSTUSER.DFHSTART TYPERSUR BY DFTCICS NOT AUTHORIZED

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

IBM makes surrogate calls based on the DFHSIT parameter XUSER.  If XUSER=YES, then these calls are made.  If XUSER=NO, then no calls are made.  If this validation is needed, then rules are needed to allow access.  XUSER=NO will stop the validation request.

Additional Information

https://www.ibm.com/support/knowledgecenter/en/SSGMCP_5.5.0/reference/sit/dfha2_xuser.html