Solved

OBJMGT Permissions

Posted on 2008-06-13
5
904 Views
Last Modified: 2013-12-06
I'm trying to create another "administrator" profile because I don't want to use QSECOFR for daily tasks.  I copied the new profile directly from QSECOFR but it is not working like it should.  From what I can tell if the profile does not have access to the Object Management authority (*OBJMGT) then the profile can't do tasks such as specify security, move or rename the object, and to add members.

The new profile does have the following permissions:
*ALLOBJ  
*AUDIT    
*IOSYSCFG
*JOBCTL  
*SAVSYS  
*SECADM  
*SERVICE  
*SPLCTL  

I have attached two screenshots of how it should look running wrkusrprf with the QSECOFR's account and the new admin account.
shot1.jpg
shot2.jpg
0
Comment
Question by:MRGCD-IS
5 Comments
 
LVL 34

Accepted Solution

by:
Gary Patterson earned 150 total points
ID: 21783392
Just make the profile a member of the group QSECOFR - no need to specify.
0
 

Author Comment

by:MRGCD-IS
ID: 21783417
I already made the new administrator account a member of the QSECOFR group.
0
 
LVL 16

Expert Comment

by:theo kouwenhoven
ID: 21793372
Try to clear your signon program and initial menu,
It's possible that you  adopt the rights from the program (if it was compiled withg *OWNER

Regards,
Murph

0
 
LVL 27

Assisted Solution

by:tliotta
tliotta earned 150 total points
ID: 21796698
MRGCD-IS:

The two different screens are due to the difference in "assistance level". This is set (1) at a system level via the QASTLVL system value, (2) for individual profiles via the ASTLVL() profile attribute accessed with CHGUSRPRF and CRTUSRPRF, and (3) via actions taken by the user for any IBM function that supports it.

I could make guesses why you see the pattern that you show, but it's easiest just to say how to fix it (assuming the most common reason for this happening).

When the "Change User" display appears (as in the second screen-shot), press <F12> to exit back out to the "Work with User Enrollment" screen. Press <F21=Select assistance level> and change the level from 1=Basic to 2=Advanced.

Once the assistance level is changed for the new profile, the two profiles should show the same screen appearances. But note that this is likely going to need to be repeated for different functions. This is _probably_ because someone did this at some time in the past for your QSECOFR profile. New profiles that are copied from QSECOFR won't get copies of the "function" changes; only the overall ASTLVL() attribute would be copied.

Tom
0
 

Author Closing Comment

by:MRGCD-IS
ID: 31467098
Thank you both!
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
change password links 7 86
z/OS IO Benchmark 3 40
Recommended Android live viewer for IP cam sys? 1 39
PCI compliance 16 33
The new Gmail Phishing Scam going around is surprising even the savviest of users with its sophisticated techniques.
As technology users and professionals, we’re always learning. Our universal interest in advancing our knowledge of the trade is unmatched by most industries. It’s a curiosity that makes sense, given the climate of change. Within that, there lies a…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question