How to grant & revoke access to start and stop the CA services to a non-root user.

Products

• CA Directory
• CA Workload Automation AE - Business Agents (AutoSys)
• CA Workload Automation AE - Scheduler (AutoSys)
• Workload Automation Agent

Issue/Introduction

Command usage and syntax to grant and revoke access to start and stop the CA services to a non-root user, via unisrvcntr.

Environment

Autosys 12.x
System Agent 12.x

Resolution

In order to add/grant users access to use the unisrvcntr command to start and stop the CA Services, follow these steps:

1. Login as root or su to root
2. Go to your ../SharedComponents/csutils/bin directory
3. this command will add the user:
   The usage is as follows:
   
             unisrvcntr useradd --name=<OS_USER> <service name or all>
   
   You can specify individual services.
   Example:
   
            unisrvcntr useradd --name=<OS_USER> CA-cci CA-wcc
   
   
4. Logoff root and login as the user. Test starting and stop ingthe ca services.

In order to remove access to use the unisrvcntr command to start and stop the CA Services, follow these steps:

1. Login as root or su to root
2. Go to your ../SharedComponents/csutils/bin directory
3. this command will add the user:
   The usage is as follows:
   
             unisrvcntr userdel --name=<OS_USER> <service name or all>
   
   You can specify individual services.
   Example:
   
            unisrvcntr userdel --name=<OS_USER> CA-cci CA-wcc
   
   
4. Logoff root and login as the user. Test starting and stopping the CA services.

In order to completely remove user access  to use the unisrvcntr command to start and stop the CA Services, follow these steps:

1. Login as root or su to root
2. Go to your ../SharedComponents/csutils/bin directory
3. this command will add the user:
   The usage is as follows:
   
             unisrvcntr userdel --name=<OS_USER>
   You can specify individual services.
   Example:
   
            unisrvcntr userdel --name=<OS_USER>
4. Logoff root and login as the user. Test starting and stopping the CA services.

In order to get a list of user and their assigned permissions to use the unisrvcntr command, follow these steps:

1. Login as root or su to root
2. Go to your /opt/CA/WorkloadAutomationAE/autosys/csutils/config/ directory
3. run the below command
   cat ./assrvc.auth