Request assignment of operator roles
Component: | BS2000 |
Functional area: | Operator function control |
Domain: | CONSOLE-MANAGEMENT |
Privileges: | OPERATING |
Routing code: | @ |
Function
By issuing the REQUEST-OPERATOR-ROLE command you ask to have one or more “operator roles” assigned to your own operator terminal (console) or user ID. An operator role is a group of system operation duties and consists of a set of routing codes defined by a security officer (SYSPRIV user ID or SECURITY-ADMINISTRATION privilege). This set may be any combination of the 40 BS2000 routing codes.
An operator role can be requested by $CONSOLE applications with dynamic authorization names and by user tasks with the OPERATING privilege.
If the “Operator LOGON” function is used (incompatible mode; system parameter NBCONOPI=Y), an operator role can also be requested at a physical operator terminal. The request is granted only if the security officer has previously given the associated user ID permission to use the chosen operator role (MODIFY-OPERATOR-ATTRIBUTES command).
Once an operator role has been successfully assigned, the assignee is authorized to receive messages distributed via the operator role’s routing codes.
In a user task with the OPERATING privilege, successful assignment merely controls the receipt of these messages when a system event stream is displayed by the presentation function of the SHOW-SYSEVENT-LOG command, which can be issued irrespective of operator roles.
After successful assignment of an operator role, operator terminals and $CONSOLE applications with dynamic authorization names can issue all commands which are protected by the operator role’s routing codes. Only commands which are protected by the @ routing code may always be entered.
If the command is repeated, the new operator roles specified are added to the existing ones. This has the same effect as issuing the command once with a list of operator roles. Once the command has been executed successfully, all operator role assignments are displayed.
Refer also to the section dealing with simplifying system operation in the “Introduction to System Administration” [14].
Format
REQUEST-OPERATOR-ROLE |
OPERATOR-ROLE = list-poss(10): <name 1..8> |
Operands
OPERATOR-ROLE = list-poss(10): <name 1..8>
All operator roles whose names are specified in the list are requested by the operator’s own user ID. A maximum of 10 operator roles can be specified.
Return codes
(SC2) | SC1 | Maincode | Meaning |
|---|---|---|---|
0 | CMD0001 | No error | |
1 | 0 | NBR0985 | Command execution unnecessary |
2 | 0 | NBR0989 | Not all specified roles could be assigned |
1 | CMD0202 | Syntax error | |
32 | NBR0983 | Internal error on command server | |
64 | CMD0216 | No authorization | |
64 | NBR0981 | Command cannot be issued from operator terminal in compatible mode (NBCONOPI=N) | |
64 | NBR0982 | Command issuer has no operator ID | |
64 | NBR0984 | Operator role not permitted |