How to convert static users to dynamic users? (Security is going to be assigning the appropriate TPX profile at logon.)

Products

Teleview TELEVIEW- PACKAGE TPX - Session Management Vman Session Management for z/OS

Issue/Introduction

We are planning to convert most of our Static Users to Dynamic Users.

Do we need to Delete the individual Static Userids BEFORE converting to Dynamic?

RACF is going to be assigning the appropriate TPX profile at logon.

Environment

Release: 5.3

TPX-Session Management-Access Management package

Resolution

There are several factors to consider:

Saved Dynamic Users

The advantage of saved dynamic users is that any changes the user makes under self-maintenance will continue from one session to the next. The only impact of saved dynamic users is the number of records kept in the ADMIN file. Since static users currently have such records and file size in not the motivation for this change, we recommend Saved Dynamic over basic Dynamic.

To enable Saved Dynamic Users, set SMRT System Parameters:

* Dynamic Users Allowed: Y
* Save Dynamic Users: Y
Set SMRT Optional parameter # 18 = N

When this parameter is set to Y, this causes user IDs normally defined as dynamic to be defined as static when users sign on to TPX.

Remove the Static User Flag

Removing the Static User flag will convert the user from static to dynamic. This can be done manually through TPXADMIN User Maintenance - User Options second panel. However, when more than a few users are involved TPX batch is much more efficient.

                 TPX Userid Maintenance Detail Panel                           
                                                            Panelid  - TEN0125 
 Command ===>                                               Userid   - 
                                                            Termid   - 
Userid:   STATIC1                                           Date     - 
UserName:                                                   Time     - 
Location:                         Phone:                                       
                                                                              
                                   Profile defaults    System defaults        
ACCESS:                 ______      ______              MULTIPLE               
Language:               __          __                  EN                     
Security system:        ____        ____                TPX                    
Inactivate on:          _           _        (F=Signoff, K=Logoff)             
Maximum sessions:       ____        ____                0                      
Default printer:        ________    ________                                   
ACB mask default:       ________    ________   -------------------------       
Propagate ACB:          _           _          |   Static user:       Y   <<<<     
Display menu:           _           _          -------------------------       
Transfer option:        ____        ____       |   Suspend user:      N        
Affinity applid:        ________    ________   |   Force new pswd:    N        
Pass Ticket User:       _           _                                          
Qualified PTick User:   _           _

Use TPX batch to report on static users and then UPDATE to remove the static user flag.

If you want to see how many static users you have, you can run the EXTRACT and REPORT on it. This is recommended before and after an UPDATE.

Example A - Extract and report on all users:

EXTRACT GIVING(EXTFILE) USER AND NO SESSIONS (UIDXNAME(--------))
SET RTITLE1
' USERID    NAME                      STATIC?   '
SET RTITLE2
' ========  ========================= =======   '
REPORT GIVING(RPTFILE) USING(EXTFILE)
(( ' &UIDXNAME' ' &VUSRRNME                '  '   &UIDXSTIC'))
 
Example B - Extract and report on only existing static users:
 
EXTRACT GIVING(EXTFILE) USER AND NO SESSIONS (UIDXSTIC(Y))
SET RTITLE1
' USERID    NAME                      STATIC?   '
SET RTITLE2
' ========  ========================= =======   '
REPORT GIVING(RPTFILE) USING(EXTFILE)
(( ' &UIDXNAME' ' &VUSRRNME                '  '   &UIDXSTIC'))

Once you are satisfied that this is the list of users that you want to change to dynamic, run the same EXTRACT statement followed by an UPDATE. Here is a sample TPX batch to change all static users to dynamic:

 EXTRACT GIVING(EXTFILE) USER AND NO SESSIONS (UIDXNAME(--------))       
 UPDATE USING(EXTFILE) (UIDXSTIC(N))

Similarly, if you plan to phase in the change to dynamic, you can add whatever extract criteria is appropriate with userid or other batch variables you find in the Batch Admin Guide. For example, only extract userids starting with ABC:

 EXTRACT GIVING(EXTFILE) USER AND NO SESSIONS (UIDXNAME(ABC-----))

Additional Information

NOTE: The list of profiles in TPXADMIN option 5 Maintain List of Profiles, will be ignored for dynamic users as per the comment on that panel: "Profiles added here take effect only if you set the "Static User" field on panel TEN0125 to Y for this user."