IBM toleration z/OS 2.4 Maintenance APAR OA51174 is required. The PTF requires action for use of use log stream subsystem exits with name other than IXGSEXIT, IFASEXIT, IFBSEXIT or DFHLGCNV.
Release : 16.0
Component : CA ACF2 for z/OS
Based on the IBM documentation 'OA51527: DOCUMENTATION UPDATES RELATED TO APAR OA51174' if a site does not use one of the log stream subsystem exit routines IXGSEXIT, IFASEXIT, IFBSEXIT or DFHLGCNV you will need to allow READ access(all users) to the FACILITY class resource IXGLOGR.SUBSYS.LSEXIT.exit_routine_name where exit_routine_name identifies the name of the log stream subsystem exit routine that you will be using.
For ACF2 the FACILITY class is protected by default and there is not ACF2 RDEFINE equivalent so you would just need to write the TYPE(FAC) resource rule. For example:
RECKEY IXGLOGR ADD( SUBSYS.LSEXIT.exit_routine_name UID(*) SERVICE(READ) ALLOW)