Monitor private authority to objects

This article describes the SECBATCH menu options and security commands that you can use to monitor private authority to objects.

Private authority is the authority specifically given to a user for an object that overrides any other authorities, such as the authority of a user's group profile or an authorization list. Users who are not listed in the group profile or authorization list cannot access objects with private authority.

You can use the following SECBATCH menu options to monitor private authority to objects: 12 to submit immediately and 14 to use the job scheduler. SECBATCH menu contains options for the object types that are typically of concern to security administrators. Use the general options (19 and 58) to specify the object type.

In addition, you can use the Print Private Authority (PRTPVTAUT) command to print a list of all the private authorities for objects of a specified type in a specified library. This report can help you detect new authorities to objects. It can also help you keep your private authority scheme from becoming convoluted and unmanageable.

For information on monitoring authority on the server, see: Monitor public authority to objects.