Authorized Program Facility (APF) is the mechanism allowing a z/OS program to become privileged. Monitoring the use of this facility will be available with this enhancement. SMF record types 14 (open), 15 (close), 17 (data set scratch), 18 (data set rename), 42 (DFSMS statistics), and 110 (CICS) will now include an additional named pair with APF status. The tag will be "APF":"YES"
or "APF":"NO"
if you can be sure of the status, or "APF":"UNKNOWN"
if you cannot be sure.