When APPC/MVS receives inbound Allocate requests with a Security_type of security_none, you have to grant access to the FACILITY class only when ATBTRACE START and STOP requests are invoked from either:

• The TP's profile JCL, or
• A call issued by the TP itself.

For example, suppose an APPC/MVS TP named COMPANY.NEWS, which runs on LU NET01.LU01, invokes the ATBTRACE REXX exec to start tracing. For this START request to be successful, issue the following commands before APPC/MVS schedules the TP in response to an Allocate with a Security_type of security_none:

RDEFINE FACILITY ATBTRACE.NET01.LU01.COMPANY.NEWS UACC(READ)
SETROPTS CLASSACT(FACILITY) RACLIST(FACILITY)
SETROPTS RACLIST(FACILITY) REFRESH