When issueing the CHAUDIT command the following is received:
FSUM5009 chaudit: "/Service": Operation not permitted
The IBM manuals state that to issue the chaudit -a command the "user needs to have the AUDITOR attribute in RACF".
This is not the Top Secret Audit Attribute.
The necessary authority to be able to issue the CHAUDIT command is the acid must be a type SCA and have a UID=0.