ICH408I
The RACF access-denied message. Names the userid, the resource, the governing profile, the access attempted and the access allowed — everything an access request needs.
See it in context
Security and RACF fundamentals: Reading a violation and asking for the right thing