Creating Ideal Users In Batch
search cancel

Creating Ideal Users In Batch

book

Article ID: 28323

calendar_today

Updated On:

Products

Datacom Ideal

Issue/Introduction

I need a way to add multiple Ideal users in batch.  What is the best practice to do this?

Environment

Component : Ideal

Resolution

The usual method to create Ideal users is to use the Ideal CREATE USER command within the online Ideal environment. However, adding large numbers of users this way can be a time-consuming process. This article describes a method for solving that problem by creating Ideal users with batch Datadictionary (DDUPDATE).

A valid Ideal user definition consists of the following Datadictionary entity-occurrences:

  • A PERSON entity-occurrence.
  • An ALIAS for the PERSON entity-occurrence, which must match the PERSON userid attribute.
  • One or more RELATIONSHIP occurrences between the PERSON and the four Ideal AUTHORIZATION profiles and (optionally) one of the DD AUTHORIZATION profiles:
    • $$ID-ADM IDEAL Administrator
      $$ID-DVW DVW Administrator
      $$PR-ADM PRINT Administrator
      $$ID-USE IDEAL User
  • One or more RELATIONSHIP occurrences between the PERSON and the defined Ideal SYSTEM entity-occurrence(s). The intersection data (INTER-DATA) of this relationship occurrence must contain the following information:
    Position

    Contents
    1 - 3

    $ID (this is a constant)
    4

    One byte of accumulated bit settings for the authorization level in the related system, as follows:

    • 1... .... - Control
      .1.. .... - Update
      ..1. .... - Read
      ...1 .... - Run-Prod
      .... 1... - Not Used
      .... .1.. - Not Used
      .... ..1. - Update-Report
      .... ...1 - Update-Panel


Following is a sample set of DDUPDATE transactions to add a new user to Ideal:

  1. -ADD PERSON,long-user-name
  2. 1003 RELT,SYSTEM,system-name(ver),PER-SYS-ACCESS
  3. 1003 DATA,$IDx
  4. 1010 ADD $$ID-ADM      <--
  5. 1010 ADD $$ID-DVW      <-- Select the appropriate access profile
  6. 1010 ADD $$PR-ADM     <--
  7. 1010 ADD $$ID-USE       <--
  8. 1014 pppppppppppp uuu
  9. -END
  10. -UPD PERSON,long-user-name(ver),PROD
  11. -END

NOTES for the lines above:

1. The -ADD transaction is a header transaction. It adds the PERSON entity-occurrence for user long-user-name (from 1 to 15 characters).

2. The 1003 RELT, SYSTEM transaction relates the user long-user-name to the system system-name(ver). The new user can be related to a maximum of 99 SYSTEMs.

3. There must be a matching 1003 DATA transaction for each 1003 RELT, SYSTEM transaction. The 1003 DATA transaction gives the user authorization within the system specified in the corresponding 1003 RELT, SYSTEM transaction. Common authorization bit settings ('x') are seen in the table below. Note that if you have an authorization setting that is not represented by a visible EBCDIC value, you will need to edit the 1003 RELT line so that you can edit the hex value directly–for example, if you want to assign only RUN-PROD access (x'10'), you will have to edit the line in hex and set column 14 to that x'10' value,

TYPE:             HEX   CHAR
---------------   ---   ----
CTL + RUN-PROD     F3     3 
CTL                E3     T 
UPD + RUN-PROD     7B     # 
UPD                6C     % 
READ + RUN-PROD    30       
READ               20       
RUN-PROD           10

4 - 7. The 1010 ADD transaction assigns the user a privilege title: {IDEAL-ADMIN, DATAVIEW-ADMIN, PRINT-ADMIN, IDEAL-USER}. For example, to define a normal IDEAL-USER, only supply the following transaction:1010 ADD $$ID-USE

8. The 1014 transaction defines a password and the userid for long-user-name. If a password is not desired, the 1014 transaction must still be included to add the userid. Note that the userid MUST start in column 19.

9. The -END transaction marks the conclusion of each transaction group.

10. The -UPD transaction marks the long-user-name definition to PROD status.

11. The -END transaction marks the conclusion of each transaction group.

When these transactions have been successfully executed, the new Ideal user is ready to sign on.

Additional Information

For more information on creating users via batch, please see the Datacom Tools documentation "Creating CA Ideal for CA Datacom Users in Batch"

As always, please contact Broadcom support for Datacom if you have further questions.

Powered by Wolken Software