Hi Mark,
The answer to your question is dependent on what fixes you have applied and what z/OS level you upgraded from.
z/OS 2.1 began the mandatory UID for every acid and the removal of the Default OMVSUSR and OMVSGRP. This is addressed in technical document TEC601436 which can be found at the following link:
https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC601436.html
There are 4 fixes for z/OS 2.2 and Top Secret r15.0.
RO86409 ADD Z/OS 2.2 DEFAULT CODE SIGNING CERTIFICATE
RO84131 SET RCVTVRMN TO 7791 ON Z/OS 2.2
RO77780 S0C4 ABEND TSSFSB +AD2 WITH JES3 AND Z/OS 2.2
RO82533 SOC4 IN SAFOEGRP AT OFFSET X'1B2'
Make sure that you have the above fixes and any pre's applied.
There is a z/OS 2.2 IZUSEC job and the converted RACF commands can be found at the following link:
https://www.ca.com/us/services-support/ca-support/ca-support-online/knowledge-base-articles.TEC1554408.html
Basically there are no specific problems other than the one's reported and fixed by the above fixes.
If you have a problem or a specific question please open a case and we will be more than happy to help.
Have a great day!!
~Eileen~