Authorization

To run the users utility, you must:
  • Have the Impersonate a client after authentication and Log on as a batch job rights.
  • Have display access to the database of the locally defined users.
  • Depending on the command option you want to use, be authorized with the following access types defined in the security file:
    Table 1. Authorizations needed to run the users utility
    Command option Object type Access type
    -u | -v None None
    username USEROBJ DISPLAY
    -s USEROBJ ADD (if username does not exist)

    MODIFY (if username exists)
    -d USEROBJ DELETE
    -e FILE DISPLAY
    USEROBJ DISPLAY (to extract user definition with password marked with asterisks)

    MODIFY (to extract user definition with encrypted password)
    -r FILE MODIFY
    USEROBJ ADD (to add a new user definition)

    MODIFY (to replace an existing user definition)
    -b FILE BUILD