A sample rule could look like this where DSNC is the ssid
, using the default TYPE code in the CLASMAP record for class DSNR.
BATCH.- UID(*) ALLOW
DIST.- UID(*) ALLOW
RRSAF.- UID( ACFSTCID) ALLOW
WLM_REFRESH.- UID( ACFSTCID) ALLOW < this is the rule line for the violation