Copy the group profile

This article describes how to copy the group profile, explains why it is important, and provides step-by-step instructions.

The group profile has two roles:
  1. The system uses it to determine whether a group member is authorized to use an object.
  2. You can use it as a pattern to create user profiles for the individual group members.
When you set up user groups, you created group profiles. Now, you can copy a group profile to create an individual profile and copy the individual profile to create other profiles in the group.
  1. Select the Work with User Enrollment option from the SETUP menu.
    Tip: If you see the Work with User Profiles display, use F21 (Select assistance level) to change to basic assistance level.
  2. Type 3 (Copy) in the Opt column in front of the user group. The screen shows the Copy User display. (If the user group you want to copy is not on your display, page down until you find it.) The system leaves the user name field blank and fills in the remaining fields from the group profile that you copied.
                  Work with User Enrollment 
    
    Type options below, then press Enter. 
      1=Add  2=Change  3=Copy  4=Remove  5=Display 
    
    Opt   User    Description 
          DPTSM   Sales and Marketing Department 
    3     DPTWH   Warehouse Department
  3. Type the name and description of the user profile that you are creating.
  4. Leave the password blank. The system automatically makes the password the same as the new user profile name.
  5. Put the group profile name in the User Group field.
  6. Check your Individual User Profile worksheet to see if this user has other values that are different from the group. Enter those values.
  7. Page down.
                  Copy User 
    
    Copy from user . . . . :  DPTWH 
    
    Type choices below, then press Enter. 
    
    User . . . . . . . . . . WILLISR 
    User description . . . . Willis, Rose 
    Password . . . . . . . . 
    Type of user . . . . . . *SYSOPR 
    User group . . . . . . . DPTWH
     
    Restrict command line use N
    
    Default library  . . . . DPTWH 
    Default printer  . . . . PRT04 
    Sign on program  . . . . *NONE 
    Library  . . . . . . . . 
    First menu . . . . . . . ICMAIN 
      Library  . . . . . . . ICPGMLIB
  8. Make any changes that are necessary on the next page of the display and press the Enter key.
  9. Check for confirmation messages at the bottom of the Work with User Enrollment display.
                  Copy User 
    
    Copy from user . . . . :  DPTWH 
    
    Type choices below, then press Enter. 
    
    Attention key program  . *SYSVAL 
      Library . . . . .
Possible Error Recovery
You see the Create User Profile display instead of the Copy User display. Use F12 (Cancel) to return to the Work with User Profiles display. Use F21 to change to basic assistance level. Start the copy operation again.
The user profile name that you have selected will not fit in the user prompt. Although user profile names may be up to 10 characters, the Copy User and Add User displays support no more than 8 character names. Either choose a shorter user name or use the intermediate assistance level to create individual user profiles.

Testing the User Profile

When you create the first individual profile in a group, you should test it by signing on with that profile. Verify that you see the correct first menu and that the signon program runs.

If you are unable to sign on successfully with the profile, the system probably could not find something specified in the profile. This could be the signon program, the job description, or one of the libraries in the initial library list. Use the Work with Printer Output display to find the job log that was written when you tried to sign on. The job log tells you what errors occurred.

After you test the user profile, you can set the password to expire.

Using an Individual Profile as a Group Profile

Creating profiles specifically to be group profiles is preferable to making existing profiles into group profiles. You may find that a specific user has all the authorities needed by a group of users and be tempted to make that user profile into a group profile. However, using an individual’s profile as a group profile may cause problems in the future:
  • If the user whose profile is used as the group profile changes responsibilities, a new profile needs to be designated as the group profile, authorities need to be changed, and object ownership needs to be transferred.
  • All members of the group automatically have authority to any objects created by the group profile. The user whose profile is the group profile loses the ability to have private objects, unless that user specifically excludes other users.
Try to plan group profiles in advance. Create specific group profiles with password *NONE. If you discover after an application has been running that a user has authorities that should belong to a group of users, do the following:
  1. Create a group profile.
  2. Use the GRTUSRAUT command to give the user’s authorities to the group profile.
  3. Remove the private authorities from the user, because they are no longer needed. Use the RVKOBJAUT or EDTOBJAUT command.