Description

Use this rule to control which users or groups can use the diagnose codes indicated for password or password phrase changes.

Examples

The following rule in the allows all users in group VALGRP to issue the diagnose against any user but only between the hours 5PM and 8AM, providing the old password is supplied:
```
ACCEPT VALGRP PASSCHNG (GROUP TIME 1700 0800
```
The following rule allows user MAINT to issue the diagnose against any user to change their password, providing the old password is supplied.
```
ACCEPT MAINT PASSCHNG
```
The following rule allows user WEBSRV to issue the diagnose to set any user’s password, even if the old password is not specified in the diagnose parameter list.
```
ACCEPT WEBSRV PASSCHNG ( NOPASS
```