You can authorize a general user or group to list user information in only user profiles that are within the scope of a selected group tree. To do this, authorize the LISTUSER command issuer with READ authority to the IRR.LU.TREE.owner resource in the FACILITY class, where owner is the group that is at the top of a group tree.

Rule: The list-of-groups checking option (SETROPTS GRPLIST) must be active.