Change Expiration Scd Entry (CHGEXPSCDE)
| Where allowed to run: All environments (*ALL) Threadsafe: No |
Parameters Examples Error messages |
The Change Expiration Schedule Entry (CHGEXPSCDE) command allows you to expire a user profile on a certain date. The expired user profile can either be disabled or deleted.
To change a user profile entry so that it will no longer expire, specify EXPDATE(*NONE).
This information can be displayed using the Display Expiration Schedule (DSPEXPSCD) command.
When a profile has been scheduled to be disabled or deleted the QSECEXP1 job is scheduled to run nightly.
Restriction: You must have *ALLOBJ, *SECADM, and *JOBCTL special authorities to use this command.
| Top |
Parameters
| Keyword | Description | Choices | Notes |
|---|---|---|---|
| USRPRF | User profile | Values (up to 10 repetitions): Name | Required, Positional 1 |
| EXPDATE | Expiration date | Date, *NONE | Required, Positional 2 |
| ACTION | Action | *DISABLE, *DELETE | Optional |
| OWNOBJOPT | Owned object option | Single values: *NODLT, *DLT Other values: Element list |
Optional |
| Element 1: Owned object value | *CHGOWN | ||
| Element 2: User profile name if *CHGOWN | Name | ||
| PGPOPT | Primary group option | Single values: *NOCHG Other values: Element list |
Optional |
| Element 1: Primary group value | *CHGPGP | ||
| Element 2: New primary group | Name, *NONE | ||
| Element 3: New primary group authority | *OLDPGP, *PRIVATE, *ALL, *CHANGE, *USE, *EXCLUDE |
| Top |
User profile (USRPRF)
This is a required parameter.
The name of the user profile that is to expire.
You can enter multiple values for this parameter.
| Top |
Expiration date (EXPDATE)
This is a required parameter.
The date on which the user profile(s) should expire.
- *NONE
- The profile should be removed from the list of user profiles that are to expire.
- expiration-date
- The date the profile will expire.
| Top |
Action (ACTION)
The action to be taken against the expired user profile.
- *DISABLE
- The profile is to be disabled.
- *DELETE
- The profile is to be deleted. If the user profile cannot be deleted, it will be disabled.
| Top |
Owned object option (OWNOBJOPT)
The type of operations to be performed on the owned objects of the user profile being deleted.
Element 1: Owned objects option
- *NODLT
- The owned objects for the user profile are not changed, and the user profile is not deleted if the user owns any objects.
- *DLT
- The owned objects for the user profile are deleted. The user profile is deleted if the deletion of all owned objects and the transfer of all primary group objects is successful.
- *CHGOWN
- The owned objects for the user profile have ownership transferred to the specified user profile. The user profile is deleted if the transfer of all owned objects is successful.
When *CHGOWN is specified, a user profile name must be specified for the new user profile. The new user profile owns all objects owned by the user profile specified by the USRPRF parameter.
Element 2: User profile of new owner
- user-profile-name
- The user profile name.
| Top |
Primary group option (PGPOPT)
The type of operations to be done on the objects that have the user profile being deleted as their primary group.
- *NOCHG
- The objects the user profile is the primary group for do not change, and the user profile is not deleted if the user is the primary group for any objects.
Element 1: Change primary group of objects
- *CHGPGP
- The objects the user profile is the primary group for are transferred to the specified user profile. The user profile is deleted if the transfer of all objects is successful.
When *CHGPGP is specified, a user profile name or *NONE must be specified. If a user profile name is specified, that user becomes the primary group for all objects for which the user profile specified by the USRPRF parameter is the primary group. If *NONE is specified, all of the objects for which the user profile (specified by the USRPRF parameter) is the primary group, will no longer have a primary group.
Element 2: User profile of new primary group
- user-profile-name
- The name of the user profile. The user profile specified must have a group ID number (GID).
- *NONE
- The objects do not have a primary group.
Element 3: New primary group authority
- *OLDPGP
- The new primary group has the same authority to the object as the old primary group.
- *PRIVATE
- If the new primary group has a private authority to the object, it will become the primary group for that object and the primary group authority will be what the private authority was. If the new primary group does not have a private authority to the object, it becomes the primary group but does not have any authority to the object.
- *ALL
- The new primary group has *ALL authority to the object.
- *CHANGE
- The new primary group has *CHANGE authority to the object.
- *USE
- The new primary group has *USE authority to the object.
- *EXCLUDE
- The new primary group has *EXCLUDE authority to the object.
| Top |
Examples
CHGEXPSCDE USRPRF(GARRY) EXPDATE('07/01/1996') ACTION(*DELETE)
This command changes the expiration schedule entry for user profile GARRY. The user profile GARRY will be deleted on July 1, 1996.
| Top |
Error messages
*ESCAPE Messages
- CPF0001
- Error found on &1 command.
- CPF2204
- User profile &1 not found.
- CPF2225
- Not able to allocate internal system object.
- CPF2251
- The expiration date parameter is not valid.
- CPFB304
- User does not have required special authorities.
| Top |