Gadi, Use of the operand REVOKE(date) requires SPECIAL. It might work if the user executing the ALTUSER command is the owner of the user profile (e.g., uuuu).
Regards, Bob Robert S. Hansel 35 years of RACF Experience Lead RACF Specialist 2021 #IBMChampion RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel www.twitter.com/RSH_RACF www.rshconsulting.com --------------------------------------------------------------------------- Upcoming RSH RACF Training - WebEx - RACF Level I Administration - APR 4-8, 2022 - RACF Level II Administration - MAR 7-11, 2022 - RACF Level III Admin, Audit, & Compliance - FEB 14-18, 2022 - RACF - Securing z/OS UNIX - JAN 24-28, 2022 --------------------------------------------------------------------------- -----Original Message----- Date: Wed, 12 Jan 2022 10:28:30 +0000 From: Gadi Ben-Avi <gad...@malam.com> Subject: Change password Hi, I would like to allow a user that does not have the special or group special attribute to issue the following command succefully: alu uuuu password(xxxx) resume noexpire revoke ( 01/13/22 ) Is this possible? Right now the command fails with ICH408I USER(OP01 ) GROUP(OPER ) NAME(OPER-01 ) PARTIAL VIOLATION ON COMMAND ALTUSER We are running z/OS v2.4. Gadi ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN