This is a new security requirement introduced with APAR OA63209 for IBM product zDMF
GZD4221E The external security manager resource which covers the target data set, does not
meet migration requirements with universal access of NONE and no users or groups with any access.
Release : 16.0
IBM apar fix is AA65549
IBM has opened APAR OA65549 for this issue.
The Apar changes the RACROUTE EXTRACT request to a RACROUTE AUTH request
The original racroute extract request looks like this..