Find users with *ALLOBJ special authority

This is a simple but highly effective script that will provide a list of users who have *ALLOBJ special authority. It also provides a few other key pieces of information. Users with *ALLOBJ special authority can control every part of the system with just a little effort.

select authorization_name, previous_signon, password_change_date, user_default_password from qsys2.user_info
where special_authorities like ‘%*ALLOBJ%

previous_signon – Shows the last time this user logged onto the system.

password_change_date – The last time the user changed their password.

user_default_password – This will show if the user ID matches their password.

Leave a comment