rmuser

When two person integrity (TPI) is enabled, a restricted security administrator can still use the rmuser command except that it cannot remove a target user that belongs to a security administrator user-group and it cannot remove a target user that is remote. To remove a target user that belongs to a security administrator user group, or to remove a target user that is remote, an approved role elevation is required. But even with an approved role elevation, rmuser is not allowed:

• If the target user has an active role elevation.
• If removing the target user results in no compliance of the minimum security administrator user requirements of TPI.