Running the ACFMERGE utility batch job and getting message ACF00042 ACMCB/ACUCB NOT ALLOWED - INVALID AUTHORITY.
The userid was added MUSASS and MUSUPDT, then ran ACFMERGE that resulted in following message.
ACF02031 NOT AUTHORIZED TO USE CONDITIONAL BYPASS PROCESSING
ACF00042 message reason: The request the CA ACF2 SVC-A routines processed specifies a user control block (ACUCB or ACMCB), but the requestor lacks the proper authority. This type of request requires APF authorization or the CA ACF2 MUSASS attribute.
ACF02031 message reason: A non-APF-authorized caller issued an SVC-A ACALT request and asked for the conditional bypassing of processing routines by setting the ACACNTL/ACACBPRC flag in the ACALT parameter list.
This macro requires not only Library APF authorization, but also SETCODE AC(1). If you browse the library, there is a column for the AC value. It will be either 00 or 01. Programs with value of 00 means the program is not authorized, and a value of 01 means it is authorized.
ACFMERGE needs to be 01. Here is a relink JCL example:
//jobname EXEC PGM=IEWL,
// PARM='LIST,MAP,XREF,AMODE=31,REUS(RENT),RMODE=ANY'
//SYSLIB DD DISP=SHR,DSN=SCEELKEX
// DD DISP=SHR,DSN=SCEELKED
// DD DISP=SHR,DSN=CSSLIB
//SYSLMOD DD DISP=SHR,DSN=CAI.CAX1LINK
//SYSDEFSD DD DUMMY
//AAX1MOD0 DD DISP=SHR,DSN=AAX1MOD0
//SYSLIN DD *
ORDER ACF50MRG
INCLUDE AAX1MOD0(ACF50MRG)
INCLUDE AAX1MOD0(ACF$GCVT)
ENTRY ACF50MRG
MODE AMODE(31),RMODE(ANY)
SETCODE AC(1)
NAME ACFMERGE(R)
In order to resolve the issue please Relink load module ACFMERGE and change SETCODE AC(0) to SETCODE AC(1), then submit ACFMERGE to successfully update the ACF2 database.
*NOTE - make sure the SYSLIN statements are not in column 1. They need to start in column 2.
For further information on ACFMERGE - Merge Password Information in Database, please review following link:
https://docops.ca.com/ca-acf2-for-z-os/16-0/en/reporting/utilities-for-ca-acf2-administration/acfmerge-merge-password-information-in-database