How to provide admin authorize in DDOL?
Article ID: 103475
Updated On:
Products
CA Datacom - DB
CA Datacom
CA Datacom - AD
CA Datacom - Server
CA CIS
CA Common Services for z/OS
CA 90s Services
CA Database Management Solutions for DB2 for z/OS
CA Common Product Services Component
CA Common Services
CA Datacom/AD
CA ecoMeter Server Component FOC
CA Easytrieve Report Generator for Common Services
CA Infocai Maintenance
CA IPC
Unicenter CA-JCLCheck Common Component
CA Mainframe VM Product Manager
CA Chorus Software Manager
CA On Demand Portal
CA Service Desk Manager - Unified Self Service
CA PAM Client for Linux for zSeries
CA Mainframe Connector for Linux on System z
CA Graphical Management Interface
CA Web Administrator for Top Secret
CA CA- Xpertware
Issue/Introduction
We have a couple of concern to provide the admin authority for the user who needs to make the data structure change in data dictionary.
1. How to locate the user ID -68K in Data dictionary?
2. How to get the display name of the user
3. Steps to authorize the user as admin Kindly provide the solution for the above concerns.
Environment
z/os, CA Datacom/DB 14.0 and higher
Resolution
There are different ways to locate the Userid and related name (entity_name).
1- Via SQL, Using DBSQLPR, the requests could be:
Select entity_name, userid from sysadm.person where status = 'P';
Select entity_name, userid from sysadm.person where status = 'P' and userid = '68K';
2- Via DDUTILTY report using SYSIN:
//SYSIN DD *
+USR DATACOM-INSTALL,NEWUSER
+RPT DETAIL,PERSON
/*
Report, among other fields, displays Userid and Name. Do a find in your report output for '68K' in userid column.
3- Via DDOL, CICS transaction.
a- signon
b- go to Authorize and enter password (like 'Datacom-Install', 'Newuser' and then 'Newuser' on the next screen when asked to provide password).
c- enter 1 - Maintain Person - option will list all the Name and userid. Scroll until you find ID '68K'
It displays panel T41U. It also displays column 'Profile' ($DD-ADM, $DD-UPD....etc)
You may enter $DD-ADM in front of userid '68K' to give that user the profile $DD-ADM.
$DD-ADM profile gives authority for managing (display,update) database structure.
The following DDUTILTY SYSIN will display all userid having $DD-ADM profile:
//SYSIN DD *
-RPT RELAT,AUTHORIZATION,$DD-ADM(PROD)
-END
and replace $DD-ADM with any other profile you may want.
1- Via SQL, Using DBSQLPR, the requests could be:
Select entity_name, userid from sysadm.person where status = 'P';
Select entity_name, userid from sysadm.person where status = 'P' and userid = '68K';
2- Via DDUTILTY report using SYSIN:
//SYSIN DD *
+USR DATACOM-INSTALL,NEWUSER
+RPT DETAIL,PERSON
/*
Report, among other fields, displays Userid and Name. Do a find in your report output for '68K' in userid column.
3- Via DDOL, CICS transaction.
a- signon
b- go to Authorize and enter password (like 'Datacom-Install', 'Newuser' and then 'Newuser' on the next screen when asked to provide password).
c- enter 1 - Maintain Person - option will list all the Name and userid. Scroll until you find ID '68K'
It displays panel T41U. It also displays column 'Profile' ($DD-ADM, $DD-UPD....etc)
You may enter $DD-ADM in front of userid '68K' to give that user the profile $DD-ADM.
$DD-ADM profile gives authority for managing (display,update) database structure.
The following DDUTILTY SYSIN will display all userid having $DD-ADM profile:
//SYSIN DD *
-RPT RELAT,AUTHORIZATION,$DD-ADM(PROD)
-END
and replace $DD-ADM with any other profile you may want.
Additional Information
- More can be found in docops:
https://docops.ca.com/ca-datacom/15-1/en/administrating/security-overview/ca-datacom-datadictionary-internal-security/ca-datacom-datadictionary-security-model/security-model-profiles-authorization-entity-occurrence
-In Batch it is done via DDUPDATE utility using card 1010.
see https://comm.support.ca.com/kb/creating-caideal-users-in-batch/kb000028323 for more.
Other DDUPDATE examples:
Note that you can ADD or DELETE, so in order to change an existing profile for an existing person you must DELETE then ADD as shown below.
See below also:
-USR DATACOM-INSTALL,NEWUSER
-ADD PERSON,userid
1010 ADD profile
1014 password
-UPD PERSON,userid(001),PROD
-END
where "profile" is a valid Datadictionary profile (e.g. $DD-ADM).
-USR DATACOM-INSTALL,NEWUSER
-UPD PERSON,test person-occ(PROD)
1010 DEL $DD-OLD-PROFILE
1010 ADD $DD-NEW
-END
https://docops.ca.com/ca-datacom/15-1/en/administrating/security-overview/ca-datacom-datadictionary-internal-security/ca-datacom-datadictionary-security-model/security-model-profiles-authorization-entity-occurrence
-In Batch it is done via DDUPDATE utility using card 1010.
see https://comm.support.ca.com/kb/creating-caideal-users-in-batch/kb000028323 for more.
Other DDUPDATE examples:
Note that you can ADD or DELETE, so in order to change an existing profile for an existing person you must DELETE then ADD as shown below.
See below also:
-USR DATACOM-INSTALL,NEWUSER
-ADD PERSON,userid
1010 ADD profile
1014 password
-UPD PERSON,userid(001),PROD
-END
where "profile" is a valid Datadictionary profile (e.g. $DD-ADM).
-USR DATACOM-INSTALL,NEWUSER
-UPD PERSON,test person-occ(PROD)
1010 DEL $DD-OLD-PROFILE
1010 ADD $DD-NEW
-END
Feedback
Powered by
