Overriding RACF security for CICSPlex SM

By default, CICSPlex® SM specifies RACF® as its external security manager. If you plan to use an external security manager that is not SAF-compatible, you can bypass security for the entire subsystem by adding the following statement to the member BBMTSS00 in the data set defined by BBSECURE DD statement in the CAS procedure:
         ESMTYPE(NONE)
Specifying ESMTYPE(NONE) effectively bypasses security for the entire subsystem. During CAS initialization, a SAF-compatible call is made to the ESM using the following parameters:
Entity name
BBMSS.ESMTYPE.NONE
Class name
FACILITY

The ESM (or a user-supplied MVS™ router exit) must exist to authorize ESMTYPE(NONE), and the CAS must be permitted UPDATE access to it. The ESM (or user-supplied MVS router exit) must respond to this request with a return code of zero (0). Otherwise CAS installation will be terminated. See Invoking a user-supplied external security manager for more details about the MVS router exit.