The ICHAUTAB module

The RACF® authorized caller table contains the names of programs that your installation authorizes to issue RACROUTE REQUEST=LIST, or RACROUTE REQUEST=VERIFY without the NEWPASS, PHRASE, NEWPHRASE, ICTX, ICRX, and IDID keywords. The programs must be reentrant and fetched from an APF-authorized library.

Guidelines:

Because incorrect use of ICHAUTAB can cause system integrity problems, do not use it; instead run these programs with APF-authorization. If you cannot make the programs APF-authorized, see the additional information in Changing the ICHAUTAB module.
If you use ICHAUTAB when RACF is enabled for sysplex communication, the table should reside in a common library and be shared by all members of the data sharing group.