AS400 Job Schedule Access

70 pts.
Tags:
AS/400 job scheduler
Job scheduling
JOBSCD
I am doing an audit on AS400 at our company and I am trying to identify users who have access to add, modify, delete jobs in AS400. I would appreciate if anyone has any suggestion on how we can obtain this information. Last year, we looked at users with access to *JOBSCD object type but after doing some research, I am not sure what this tells us. Does anyone know what this mean as well? Thanks in advance for your help,
ASKED: June 29, 2008  6:24 PM
UPDATED: May 2, 2010  8:31 AM

Answer Wiki

Thanks. We'll let you know when a new response is added.

You could look at who has authority to ADDJOBSCDE, CHGJOBSCDE, WRKJOBSCDE. If someone has authority to these commands they can Add, Change, Delete, etc. If you do not want them to have this authority, you could just have them with authority to DSPJOBSCDE. This way they can view any job but not make any changes.

*JOBSCD means…A job schedule entry (*JOBSCD) object contains entries (specific dates and
times) when batch jobs will be submitted to a job queue.

=================================================================

If a user can run jobs, there should be no need to be concerned about the job scheduler. A user can’t do anything with the scheduler that they can’t do with any job. They can’t work with other users’ jobs.

The issue is whether or not you give ‘special authorities’ to your users. If they don’t have *JOBCTL special authority, they can’t affect jobs that aren’t their own.

The answer is not to give special authorities to users who don’t need them. And if they need *JOBCTL, then the job scheduler should be part of their jobs.

Tom

Discuss This Question: 1  Reply

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
  • graybeard52
    But if you really want people who can control jobs that are running, you want to look for profiles with *JOBCTL authority.
    3,115 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Thanks! We'll email you when relevant content is added and updated.

Following