How to set a user to be able to view jobs but not allow the user to perform complete, resubmit, reset definition

Products

• DSERIES- SERVER
• CA Workload Automation DE - System Agent (dSeries)

Issue/Introduction

Introduction: 

In a production environment only operators are allowed to perform any action in Workload Automation Desktop Client. 

Other user have only authorisation to look at everything and are not able to modify anything. 

We recently noticed that these other users are able to restart jobs. What must we do to prevent that?

 

Question: 

How to set a user to be able to view jobs but not allow the user to perform complete, resubmit, reset definition ?

How also to allow these users to be able to access the spool files of the jobs ?

 

Answer: 

First select the Admin Section from the Desktop client, then select the Security part of the tree, then select the user that you wish to update the security policies for from the list shown as indicated in the screenshot below.

<Please see attached file for image>

 

To add the policy changes use the "Add..." button in the Permissions tab of the User Definition, this will cause the Permission policy screen to open , now select the permission type APPLX from the drop down list.

You can now enter either an Application Name , Job Name , Job Qualifier or you can enter an asterisk (*) as a wild card to select all or enter a value with a wild card for example "TEST*" which will then select all values for Application,Job,Qualifier that match "TEST*".

In the Command Name field use the drop down box to select "SUBSCRIBE".

Select the access to be "Allow" so that the user can select select to subscribe to the defined jobs.

Now press the "OK" to insert the change to the permissions.

<Please see attached file for image>

 

 

To allow the users to be able to view the spool files for the jobs they will also need to add the following rule for the Command Name GETSPOOLFILE as shown below :

<Please see attached file for image>

 

Once all the changes have been made please press the disk symbol 

<Please see attached file for image>

 from the users security definition to save the changes to the policies to the user.

 

Additional Information:

Under the following link you can view the Security permissions for Workload Automation DE 11.3.* :

https://docops.ca.com/ca-wla-de/11-3-3/en/administrating/securing/establishing-and-controlling-security/security-permissions

 

Under the following link you can view the Security permissions for Workload Automation DE 12.* :

https://docops.ca.com/ca-wla-de/12-0/en/administrating/securing/establishing-and-controlling-security/security-permissions

  

Environment

Release: DSWAHA01300-12-Workload Automation DE-High Availability
Component: