Service pack 4 for Windows® 2000 introduced a new user right "Impersonate a client after authentication".
Users of the CICS® Universal Client might need this right; see Starting clients and terminals for information on how to grant users the right.