Add Special Authority to User Profiles

85 pts.
Tags:
AS/400
i5/OS
I would like to add *JOBCTL, *IOSYSCFG to Basic User Profiles to be able to run Night Jobs. I am only a SECADM that might be the problem. I don't see the option anywhere. Tried CHGUSRPRF, WRKUSRPRF, +. No luck. Please help. I do appreciate any input. Also I need to add components to iSeries Navigator to do this, but I can't find the source or any install disks. Thanks a lot.

Software/Hardware used:
AS400, iServer, i5/OS

Answer Wiki

Thanks. We'll let you know when a new response is added.

In order to add authority to a profile, your profile must already have that authority.

According to the IBM help screen:

*SECADM
Security administrator authority is given to the user.
The user can create, change, or delete user profiles
if authorized to the Create User Profile (CRTUSRPRF),
Change User Profile (CHGUSRPRF), or Delete User
Profile (DLTUSRPRF) commands and is authorized to the
user profile. <b>This authority does not allow giving
special authorities that this user profile does not
have.</b> To give *SECADM special authority to another
user, a user must have both *ALLOBJ and *SECADM
special authorities.

===============================================

Note that the above is true in the context of the “effective” user profile (or current user) for a job. The effective and current users for a job can be changed during run-time.

A job user may call a program that <i>supplies</i> an effective user through the mechanism called “adopted authority”. This adopted authority remains in effect as long as the program remains in the call stack. (Other programs lower in the call stack may choose not to propagate adopted authority to lower levels though.)

Or a job user may call a program that changes the job’s current user to a more powerful profile. The current user of a job remains in effect until later calls revert the job back to the job user’s authority. (Typically, the programs that switch a new current user in and back out gain the capability through adopted authority.)

In short, a low-authority user may be granted the permission to CALL programs that temporarily supply needed authority.

Tom

Discuss This Question: 2  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • pdraebel
    There is an install image for Client Access on your iSeries server. Check the link /QIBM/ProdData/CA400/Express/Install/Image on your machine. I do not exactly know how to do that but in the Infocenter you should find the info on how to install CA from your iSeries server.
    2,895 pointsBadges:
    report
  • Whatis23
    There is the standard SETUP.EXE file to execute and start the install in the path. You may have to map your drive to it.
    5,665 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following