Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

OBJMGT Permissions

Posted on 2008-06-13
5
906 Views
Last Modified: 2013-12-06
I'm trying to create another "administrator" profile because I don't want to use QSECOFR for daily tasks.  I copied the new profile directly from QSECOFR but it is not working like it should.  From what I can tell if the profile does not have access to the Object Management authority (*OBJMGT) then the profile can't do tasks such as specify security, move or rename the object, and to add members.

The new profile does have the following permissions:
*ALLOBJ  
*AUDIT    
*IOSYSCFG
*JOBCTL  
*SAVSYS  
*SECADM  
*SERVICE  
*SPLCTL  

I have attached two screenshots of how it should look running wrkusrprf with the QSECOFR's account and the new admin account.
shot1.jpg
shot2.jpg
0
Comment
Question by:MRGCD-IS
5 Comments
 
LVL 35

Accepted Solution

by:
Gary Patterson earned 150 total points
ID: 21783392
Just make the profile a member of the group QSECOFR - no need to specify.
0
 

Author Comment

by:MRGCD-IS
ID: 21783417
I already made the new administrator account a member of the QSECOFR group.
0
 
LVL 16

Expert Comment

by:theo kouwenhoven
ID: 21793372
Try to clear your signon program and initial menu,
It's possible that you  adopt the rights from the program (if it was compiled withg *OWNER

Regards,
Murph

0
 
LVL 27

Assisted Solution

by:tliotta
tliotta earned 150 total points
ID: 21796698
MRGCD-IS:

The two different screens are due to the difference in "assistance level". This is set (1) at a system level via the QASTLVL system value, (2) for individual profiles via the ASTLVL() profile attribute accessed with CHGUSRPRF and CRTUSRPRF, and (3) via actions taken by the user for any IBM function that supports it.

I could make guesses why you see the pattern that you show, but it's easiest just to say how to fix it (assuming the most common reason for this happening).

When the "Change User" display appears (as in the second screen-shot), press <F12> to exit back out to the "Work with User Enrollment" screen. Press <F21=Select assistance level> and change the level from 1=Basic to 2=Advanced.

Once the assistance level is changed for the new profile, the two profiles should show the same screen appearances. But note that this is likely going to need to be repeated for different functions. This is _probably_ because someone did this at some time in the past for your QSECOFR profile. New profiles that are copied from QSECOFR won't get copies of the "function" changes; only the overall ASTLVL() attribute would be copied.

Tom
0
 

Author Closing Comment

by:MRGCD-IS
ID: 31467098
Thank you both!
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

One of the biggest threats in the cyber realm pertains to advanced persistent threats (APTs). This paper is a compare and contrast of Russian and Chinese APT's.
In this increasingly digital world, security hacks are no longer just a threat, but a reality. As we've witnessed with Target's big identity hack 2013, Heartbleed in 2015, and now Cloudbleed, companies and their leaders need to prepare for the unthi…
This is used to tweak the memory usage for your computer, it is used for servers more so than workstations but just be careful editing registry settings as it may cause irreversible results. I hold no responsibility for anything you do to the regist…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question