Change assignment of operator roles to user IDs
Component: | SRPMNUC |
Functional area: | Operator function control |
Domain: | SECURITY-ADMINISTRATION |
Privileges: | SECURITY-ADMINISTRATION |
Function
This command is used to assign one or more operator roles to an operator identification, which is recorded in the user catalog for a pubset as a user ID. After this assignment has been made, an authorized application which is connected under this operator identification may then accept the specified operator role, and thus undertake a particular area of work within the operating function. The authorizations (work areas) which are linked to the operator role must have been specified beforehand by systems support, using a CREATE-OPERATOR-ROLE command.
It should be noted that when a MODIFY-OPERATOR-ATTRIBUTES command is executed both the user ID and the operator role must be recorded in the user catalog of the same pubset.
Systems support can obtain an overview of the roles which have been defined, and of their assignment to user IDs, by means of the commands SHOW-OPERATOR-ATTRIBUTES and SHOW-OPERATOR-ROLE.
Format
MODIFY-OPERATOR-ATTRIBUTES |
USER-IDENTIFICATION = <name 1..8> ,PUBSET = *HOME / <cat-id 1..4> ,REMOVE-OPERATOR-ROLE = *NONE / *ALL / list-poss(48): <name 1..8> ,ADD-OPERATOR-ROLE = *NONE / list-poss(48): <name 1..8> |
Operands
USER-IDENTIFICATION = <name 1..8>
The user ID (name of the authorized application) for which an assignment to an operator role is to be specified or amended on the pubset concerned.
PUBSET =
Specifies the pubset in whose user catalog the user ID and the operator role are recorded.
PUBSET = *HOME
The assignment is to apply for the home pubset in the current session.
PUBSET = <cat-id 1..4>
Precise specification of the pubset to which the assignment is to apply.
REMOVE-OPERATOR-ROLE =
Specifies the operator roles which are to be withdrawn from the user ID on the specified pubset.
REMOVE-OPERATOR-ROLE = *NONE
Preset value: no operator roles are to be withdrawn from the user ID.
REMOVE-OPERATOR-ROLE = *ALL
All the operator roles previously assigned to the user ID on the nominated pubset are to be withdrawn.
REMOVE-OPERATOR-ROLE = list-poss(48): <name 1..8>
The exact specification of up to 48 operator roles which are to be withdrawn from the user ID.
ADD-OPERATOR-ROLE =
Specifies additional operator roles which are to be assigned to the user ID nominated, on the pubset.
ADD-OPERATOR-ROLE = *NONE
Preset value: no additional operator roles are to be assigned to the user ID.
ADD-OPERATOR-ROLE = list-poss(48): <name 1..8>
The exact specification of up to 48 additional operator roles which are to be assigned to the user ID.
Return codes
(SC2) | SC1 | Maincode | Meaning |
|---|---|---|---|
0 | CMD0001 | No error | |
2 | 0 | SRM6001 | Command executed with a warning |
32 | SRM6020 | System error during command processing | |
64 | SRM6040 | Semantic error | |
130 | SRM6030 | Command cannot temporarily be executed |