Situation
You want to get an overview of all the user accounts that need to change their password or will have to change it in the near future.
Solution
You can get a list of all users whose password will expire in 2024 or is already expired:
udm users/user list --filter "(&(krb5PasswordEnd>=20240101000000Z)(krb5PasswordEnd<=20241231000000Z))"