Run application servers under specific user profiles

You can run an application server under a user profile other than the default QEJBSVR user profile.

1. Choose an existing user profile, or create a new user profile with the Create User Profile (CRTUSRPRF) command.

   The new user profile must have authority to the same objects to which QEJBSVR has authority. Specify QEJBSVR as the new profile's group profile. Run this command from the iSeries command line:

     CHGUSRPRF USRPRF(profile) GRPPRF(QEJBSVR)

   where profile is the name of the new user profile.

2. (Optional) If the application server is currently running under a user profile other than QEJBSVR, run the following commands in Qshell (where instance is the name of your instance):

   1. chown -R QEJBSVR /QIBM/UserData/WebASE/ASE5/instance

   2. cd /QIBM/ProdData/WebASE/ASE5/bin

   3. grtwasaut -user QEJBSVR -dtaaut RWX -objaut ALL -recursive

   4. (Optional) If the old user profile is no longer used to run any of the servers in the instance, you can revoke the authorities that it has by running the following command:

      rvkwasaut -instance instance -user profile -recursive

      where profile is the name of the old user profile.

3. Use iSeries Navigator to enable the user profile to run the application server.

4. Specify the new user profile name in the Run As User property of the application server:

   1. Start the WebSphere administrative console.
   2. In the navigation menu, expand Servers, and click Application Servers.
   3. In the Application Servers page, click the name of your application server.
   4. Under Additional Properties, click Process Definition.
   5. Under Additional Properties, click Process Execution.
   6. Enter the name of the user profile in the Run As User field.
   7. Click OK
   8. Save your configuration.
   9. Restart the application server.