When this person signs on does he go to a Menu and if exits the menu he signsoff. Then either his profile or group profile(recommended) can have read access to objects. What are you trying to give the user access to IFS or Library Objects. ======================================================= If you're asking how to grant a user *READ access, you use the EDTOBJAUT or GRTOBJAUT command. The capability of the user to access a command line has no relationship to whether or not authorities can be granted to that user for a file. If you're asking how to grant authorities to someone when <b>you</b> can't access a command line, then it's a very different question -- although it has a closely related answer. Most forms of access don't involve a command line. In order to read a file through an ODBC connection, *READ authority is needed. In order to ftp a file out of the system, *READ authority is needed. In order to drag/drop a file object through a shared drive, *READ authority is needed. In order to run a command such as CPYF against the file through a remote command interface, *READ authority is needed. In none of those is a command line needed. Similarly, you can issue a GRTOBJAUT command through a ftp RCMD subcommand or through a remote command interface. Often, the interface is iSeries Navigator -- no command line is needed, nor is an interactive session needed. Tom

When this person signs on does he go to a Menu and if exits the menu he signsoff. Then either his profile or group profile(recommended) can have read access to objects. What are you trying to give the user access to IFS or Library Objects. ======================================================= If you're asking how to grant a user *READ access, you use the EDTOBJAUT or GRTOBJAUT command. The capability of the user to access a command line has no relationship to whether or not authorities can be granted to that user for a file. If you're asking how to grant authorities to someone when <b>you</b> can't access a command line, then it's a very different question -- although it has a closely related answer. Most forms of access don't involve a command line. In order to read a file through an ODBC connection, *READ authority is needed. In order to ftp a file out of the system, *READ authority is needed. In order to drag/drop a file object through a shared drive, *READ authority is needed. In order to run a command such as CPYF against the file through a remote command interface, *READ authority is needed. In none of those is a command line needed. Similarly, you can issue a GRTOBJAUT command through a ftp RCMD subcommand or through a remote command interface. Often, the interface is iSeries Navigator -- no command line is needed, nor is an interactive session needed. Tom