The Change Expiration Schedule Entry (CHGEXPSCDE) command allows you to expire a user profile on a certain date. The expired user profile can either be disabled or deleted.

When a profile is disabled or deleted, a message will be sent to the message queue of the user who issued the CHGEXPSCDE command.

To remove a user profile from the file so that it will no longer expire specify EXPDATE(*NONE).

This information can be displayed using the Display Expiration Schedule (DSPEXPSCD) command.

Once a profile has been scheduled to be disabled or deleted the CHGEXPSCDE job runs nightly. If you want to change the time the job runs, you can use the Change Job Schedule Entry (CHGJOBSCDE) command to change the QSECEXP1 job.

Restriction: You must have *ALLOBJ, *SECADM, and *JOBCTL special authorities to use this command.

Parameters

Keyword	Description	Choices	Notes
USRPRF	User profile	Values (up to 10 repetitions): Name	Required, Positional 1
EXPDATE	Expiration date	Date, *NONE	Required, Positional 2
ACTION	Action	*DISABLE, *DELETE	Optional
OWNOBJOPT	Owned object option	Single values: *NODLT, *DLT Other values: Element list	Optional
	Element 1: Owned object value	*CHGOWN
	Element 2: User profile name if *CHGOWN	Name
PGPOPT	Primary group option	Single values: *NOCHG Other values: Element list	Optional
	Element 1: Primary group value	*CHGPGP
	Element 2: New primary group	Name, *NONE
	Element 3: New primary group authority	*OLDPGP, *PRIVATE, *ALL, *CHANGE, *USE, *EXCLUDE

Top

User profile (USRPRF)

This is a required parameter.

The name of the user profile that is to expire.

You can enter multiple values for this parameter.

Expiration date (EXPDATE)

This is a required parameter.

The date on which the user profile(s) should expire.

*NONE

The profile should be removed from the list of user profiles that are to expire.

expiration-date

The date the profile will expire.

Action (ACTION)

The action to be taken against the expired user profile.

*DISABLE

The profile is to be disabled.

*DELETE

The profile is to be deleted.

Owned object option (OWNOBJOPT)

The type of operations to be performed on the owned objects of the user profile being deleted.

Element 1: Owned objects option

*NODLT

The owned objects for the user profile are not changed, and the user profile is not deleted if the user owns any objects.

*DLT

The owned objects for the user profile are deleted. The user profile is deleted if the deletion of all owned objects and the transfer of all primary group objects is successful.

*CHGOWN

The owned objects for the user profile have ownership transferred to the specified user profile. The user profile is deleted if the transfer of all owned objects is successful.

When *CHGOWN is specified, a user profile name must be specified for the new user profile. The new user profile owns all objects owned by the user profile specified by the USRPRF parameter.

Element 2: User profile of new owner

user-profile-name

The user profile name.

Primary group option (PGPOPT)

The type of operations to be done on the objects that have the user profile being deleted as their primary group.

*NOCHG

The objects the user profile is the primary group for do not change, and the user profile i s not deleted if the user is the primary group for any objects.

Element 1: Change primary group of objects

*CHGPGP

The objects the user profile is the primary group for are transferred to the specified user profile. The user profile is deleted if the transfer of all objects is successful.

When *CHGPGP is specified, a user profile name or *NONE must be specified. If a user profile name is specified, that user becomes the primary group for all objects for which the user profile specified by the USRPRF parameter is the primary group. If *NONE is specified, all of the objects for which the user profile (specified by the USRPRF parameter) is the primary group, will no longer have a primary group.

Element 2: User profile of new primary group

user-profile-name

The name of the user profile. The user profile specified must have a group ID number (GID).

*NONE

The objects do not have a primary group.

Element 3: New primary group authority

*OLDPGP

The new primary group has the same authority to the object as the old primary group.

*PRIVATE

If the new primary group has a private authority to the object, it will become the primary group for that object and the primary group authority will be what the private authority was. If the new primary group does not have a private authority to the object, it becomes the primary group but does not have any authority to the object.

*ALL

The new primary group has *ALL authority to the object.

*CHANGE

The new primary group has *CHANGE authority to the object.

*USE

The new primary group has *USE authority to the object.

*EXCLUDE

The new primary group has *EXCLUDE authority to the object.

Examples

CHGEXPSCDE   USRPRF(GARRY)  EXPDATE('07/01/1996')  ACTION(*DELETE)

This command changes the expiration schedule entry for user profile GARRY. The user profile GARRY will be deleted on July 1, 1996.

Error messages

*ESCAPE Messages

CPFB304

User does not have required special authorities.