ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzam5_5.4.0.1/rzam5limitaccess.htm

126 lines
8.1 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Customize your connection" />
<meta name="abstract" content="You may choose not to give users the ability to run commands from a wireless device but still provide users with the ability to view monitors and system status. You may also want to change your task details expiration. This page shows you how to limit user access to iSeries Navigator for Wireless functions using Application Administration, as well as customize your task details retrieval length." />
<meta name="description" content="You may choose not to give users the ability to run commands from a wireless device but still provide users with the ability to view monitors and system status. You may also want to change your task details expiration. This page shows you how to limit user access to iSeries Navigator for Wireless functions using Application Administration, as well as customize your task details retrieval length." />
<meta name="DC.Relation" scheme="URI" content="rzam5setup.htm" />
<meta name="DC.Relation" scheme="URI" content="rzam5connect.htm" />
<meta name="DC.Relation" scheme="URI" content="../rzaj3/rzaj3overview.htm" />
<meta name="DC.Relation" scheme="URI" content="rzam5workwithtasks.htm" />
<meta name="DC.Relation" scheme="URI" content="rzam5runcommands.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2005, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2005, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzam5limitaccess" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Customize your connection</title>
</head>
<body id="rzam5limitaccess"><a name="rzam5limitaccess"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Customize your connection</h1>
<div><p>You may choose not to give users the ability to run commands from
a wireless device but still provide users with the ability to view monitors
and system status. You may also want to change your task details expiration.
This page shows you how to limit user access to iSeries™ Navigator for Wireless functions
using Application Administration, as well as customize your task details retrieval
length.</p>
<p>Limit user access to Management Central by manually removing functions
from iSeries Navigator
for Wireless and by configuring Application Administration, and customize
how long summary information stays on your display before it is cleared.</p>
<div class="section"><h4 class="sectiontitle">Limit user access</h4><p>Because you may want to limit
a user's capability to work with Management Central from a wireless device,
the following steps provide a way to let users view monitors and system status
but not take any action from iSeries Navigator for Wireless.</p>
<p>The following
functions can be removed:</p>
<ul><li>Running commands on iSeries and integrated xSeries<sup>®</sup> servers</li>
<li>Starting or shutting down integrated xSeries servers</li>
<li>Performing any action on a job (Hold, Release, End)</li>
<li>Performing any action on a message (Reply, Delete)</li>
<li>Starting, stopping, or restarting any monitor</li>
</ul>
<p>To limit access, you must create the following options file:</p>
<ol><li>In the integrated file system, create a file in the following directory: <p><strong>Directory:</strong> QIBM/UserData/OS400/MGTC/Pervasive/<br />
<strong>File:</strong> QYPV_OPTIONS.OPT</p>
</li>
<li>Enter one of the following text strings into your file: <ul><li>readonly=yes</li>
<li>readonly=no</li>
</ul>
</li>
</ol>
<p>A specific user can also have an options file named QYPV <em>xxxxxx</em>.OPT,
where <em>xxxxxx</em> is the user ID. This specific user file will override
the QYPV_OPTIONS.OPT file allowing you to grant all users readonly=yes authority,
while granting specific users all access.</p>
</div>
<div class="section"><h4 class="sectiontitle">Set task details retrieval length</h4><p>Detailed information
about tasks are available on the summary screen. These details are set to
expire in 24 hours (tasks will still run, but no new data about a task will
be retrieved from the central system and displayed on your wireless device
after 24 hours). You can change the expiration time by editing the following
option file:</p>
<blockquote><strong>Directory:</strong> QIBM/UserData/OS400/MGTC/Pervasive/</blockquote>
<blockquote><strong>File:</strong> QYPV_OPTIONS.OPT</blockquote>
<p>Add
the following new entry to the option file (where <em>XXXX</em>, any number
between 1-9999, is the number of hours):</p>
<blockquote>HOURS_OLD= <em>XXXX</em></blockquote>
<p>This
is not case sensitive and can be either on a separate line or separated by
a space from the READONLY entry.</p>
<p>For example, your newly edited file
might read:</p>
<blockquote>READONLY=no</blockquote>
<blockquote>HOURS_OLD=48</blockquote>
<p>This will give
you full access and show tasks that have run in the last 48 hours.</p>
</div>
<div class="section"><h4 class="sectiontitle">Configure Application Administration</h4><p>You can use
Application Administration to control user access to the following functions
in Management Central: limit or grant access to monitors and commands. You
should check to make sure the functions selected in Application Administration
are configured to match your desired preferences for connecting to Management
Central with a wireless device.</p>
<p>Examples:</p>
<ul><li>If a user is not authorized to Management Central but has a valid user
ID on the iSeries,
when they try to connect to Management Central with a wireless device an authorization
error message is displayed.</li>
<li>If a user is authorized to Management Central but does not have Application
Administration authority to access monitors, no monitor information is displayed
on the wireless device.</li>
<li>If a user is not authorized to commands in Management Central, they will
not be able to run a command definition or run a command on an Integrated xSeries Server.</li>
</ul>
<p>For more information on configuring and using Application Administration,
see: Application Administration.</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzam5setup.htm" title="Covers the software and hardware that is required to use iSeries Navigator for Wireless. This also helps you decide which kind of wireless device to use and what kind of applications you may need to install and configure.">Set up iSeries Navigator for Wireless</a></div>
</div>
<div class="relconcepts"><strong>Related concepts</strong><br />
<div><a href="rzam5connect.htm" title="Connect to the central system using your wireless device.">Connect to your central system</a></div>
<div><a href="../rzaj3/rzaj3overview.htm">Application Administration</a></div>
<div><a href="rzam5workwithtasks.htm" title="You can view summary details for all your Management Central tasks.">Work with tasks</a></div>
<div><a href="rzam5runcommands.htm" title="iSeries Navigator for Wireless makes it easy to run commands on iSeries systems from your wireless device.">Run commands across multiple systems</a></div>
</div>
</div>
</body>
</html>