Attempting to switch package security to be driven by the Endevor External security package; I have set the PKGSEC parm to Migrate but it does not seem to be working and the ESI is not showing me anything.
The PKGSEC parm has three options:
Approver: - this will restrict package actions post cast to those defined with the attached approver group.
ESI – this will restrict package actions post cast to those defined by the in-house security package (ACF2, Top SECRET or RACF0)
Migrate: This is used when a site is in transition between using Approver and ESI security.
With Migrate both are checked, but the most important fact to remember is that APPROVER rules over ESI. If a user is granted access via APPROVER, ESI is not called. ESI will only be called if the user attempting the action is not a member of any attached approver group to the package.