This problem is usually caused by missing TSOAUTH OPER authorization in the external security package (TSS, ACF2, RACF).
For RACF the command to grant this authority is below:
PERMIT OPER ACCESS(READ) CLASS(TSOAUTH) ID(user)
For CA Top Secret the command is:
TSS PERMIT(userA) TSOAUTH(OPER)
Another possible cause can be some security (SEC) rule.
For CA ACF2 the command is:
SET RESOURCE(SAF)
RECKEY OPER ADD( UID(UID string for USER1) SERVICE(READ))