With MFA/AAM Multi Factor Authentication.
What is IBMFAC(IRR.RFACTOR.USER) used for?
Permission required for user - IBMFAC(IRR.RFACTOR.USER)
This permission (driven out of SAF) is required for R_Factor Getuser events, which occur for factors: IBMRSA, CAPAM (and soon, Radius), but not for CARSA. The R_Factor Getuser is used to extract the MFA segment data for the MFA driven.