Guardian Procedure Calls Reference Manual

To debug an OSS process, one of these must be true:
The calling process must have appropriate privilege; that is, it must be locally authenticated
as the super ID on the system where the target process is executing.
All these apply:
The caller's effective user ID is the same as the saved user ID of the target process.
The caller has sufficient "nonremoteness"; that is, the caller is locally authenticated, or
the target process is remotely authenticated and the caller is authenticated from the
viewpoint of the system where the target process is executing.
The caller has read access to the program file and any library files.
The program does not contain PRIV or CALLABLE routines.
The target is not a system process.
The now parameter is not specified.
Only program file owners and users with appropriate privileges are able to debug programs that
set the user ID.
258 Guardian Procedure Calls (D-E)