Steps for delegating the authority to reset the password for any user

Perform the following steps to authorize a general user or group to use the ALTUSER command to resume a revoked user or reset a user's password or password phrase.

Define a profile to protect the IRR.PASSWORD.RESET resource in the FACILITY class.
Example:
```
RDEFINE FACILITY IRR.PASSWORD.RESET UACC(NONE)
   AUDIT(FAILURES(NONE) SUCCESSES(READ))
```
______________________________________________________________________
Authorize the general users or groups.
Example:
```
PERMIT IRR.PASSWORD.RESET CLASS(FACILITY) ID(HELPDESK USER19) ACCESS(READ) 
```
See Levels of authority for restrictions and details about authority based on the access level to IRR.PASSWORD.RESET.

______________________________________________________________________
Activate the FACILITY class if not already active.
Example:
```
SETROPTS CLASSACT(FACILITY) 
```
If the FACILITY class is already active and RACLISTed, refresh the FACILITY class profiles.
```
SETROPTS RACLIST(FACILITY) REFRESH
```
______________________________________________________________________

You have now authorized a general user or group to use the ALTUSER command to resume the user ID or reset the password or password phrase for any user, excluding protected users and users with the SPECIAL, OPERATION, or AUDITOR attribute.