Solved

OBJMGT Permissions

Posted on 2008-06-13
5
898 Views
Last Modified: 2013-12-06
I'm trying to create another "administrator" profile because I don't want to use QSECOFR for daily tasks.  I copied the new profile directly from QSECOFR but it is not working like it should.  From what I can tell if the profile does not have access to the Object Management authority (*OBJMGT) then the profile can't do tasks such as specify security, move or rename the object, and to add members.

The new profile does have the following permissions:
*ALLOBJ  
*AUDIT    
*IOSYSCFG
*JOBCTL  
*SAVSYS  
*SECADM  
*SERVICE  
*SPLCTL  

I have attached two screenshots of how it should look running wrkusrprf with the QSECOFR's account and the new admin account.
shot1.jpg
shot2.jpg
0
Comment
Question by:MRGCD-IS
5 Comments
 
LVL 34

Accepted Solution

by:
Gary Patterson earned 150 total points
Comment Utility
Just make the profile a member of the group QSECOFR - no need to specify.
0
 

Author Comment

by:MRGCD-IS
Comment Utility
I already made the new administrator account a member of the QSECOFR group.
0
 
LVL 16

Expert Comment

by:theo kouwenhoven
Comment Utility
Try to clear your signon program and initial menu,
It's possible that you  adopt the rights from the program (if it was compiled withg *OWNER

Regards,
Murph

0
 
LVL 27

Assisted Solution

by:tliotta
tliotta earned 150 total points
Comment Utility
MRGCD-IS:

The two different screens are due to the difference in "assistance level". This is set (1) at a system level via the QASTLVL system value, (2) for individual profiles via the ASTLVL() profile attribute accessed with CHGUSRPRF and CRTUSRPRF, and (3) via actions taken by the user for any IBM function that supports it.

I could make guesses why you see the pattern that you show, but it's easiest just to say how to fix it (assuming the most common reason for this happening).

When the "Change User" display appears (as in the second screen-shot), press <F12> to exit back out to the "Work with User Enrollment" screen. Press <F21=Select assistance level> and change the level from 1=Basic to 2=Advanced.

Once the assistance level is changed for the new profile, the two profiles should show the same screen appearances. But note that this is likely going to need to be repeated for different functions. This is _probably_ because someone did this at some time in the past for your QSECOFR profile. New profiles that are copied from QSECOFR won't get copies of the "function" changes; only the overall ASTLVL() attribute would be copied.

Tom
0
 

Author Closing Comment

by:MRGCD-IS
Comment Utility
Thank you both!
0

Featured Post

Superior storage. Superior surveillance.

WD Purple drives are built for 24/7, always-on, high-definition security systems. With support for up to 8 hard drives and 32 cameras, WD Purple drives are optimized for surveillance.

Join & Write a Comment

Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
Nothing in an HTTP request can be trusted, including HTTP headers and form data.  A form token is a tool that can be used to guard against request forgeries (CSRF).  This article shows an improved approach to form tokens, making it more difficult to…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now