User Maintenance

In Entire Operations, a user ID can be used to enter the system. Entire Operations user IDs should, but need not be defined to the host TP monitor. Several users can log on to Entire Operations with the same user ID and password at the same time. For reasons of data security and in order to trace data modifications, however, each user usually has a personal user ID and password.

This document covers the following topics

• Listing Users

• Viewing, Adding and Modifying a User

• User Definition and Profile Settings

• Administration Functions

• Network Maintenance Functions

• Reporting Functions

• Monitoring Functions

• Representation - Display Settings

• User Attributes for Character Interface and GUI Client

• Selection Criteria Settings

• Sort Orders in Lists

• Operating System Server Default User IDs for a User

• Adding and Removing User/Owner Links

• Defining Sub-Administrators

• Deleting a User

Listing Users

To list all users

• Select the option User Maintenance from the System Services Menu.

  A User List screen with a list of Entire Operations user IDs appears with their associated owner names:

  04.11.08 ***** Entire Operations ***** 15:40:52 User List ------------------------------------------------------------------------------ Cmd User Name Owner Name *------- _ ADMIN SYSDBA _ ASF ASF _ GHH EXAMPLE _ DEMO SN _ DEMODEMO SN _ DOC DOC _ DOC-2 DOC _ DOC2 MBE _ DP5 SAJPR _ DRO EXAMPLE _ DWE DWE _ DWI DWI *********************************** m o r e ********************************** D Delete M Modify Command => ____________________________________________________________ Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12--- Help Add End Save Up Down Menu

  You can scroll the list using PF7 (Up) and PF8 (Down). For a more selective list, add a start value in the first line of the User Name column. For example, enter S and press ENTER to start the list with IDs beginning with the letter S.

  You can add, delete and modify user profiles using the available line commands and PF keys. When using line commands, select a user by entering the line command in the input field that precedes the user ID.

  The available line commands are:

  Line Commands: User List

  Line Command	Description
  D	Delete a user definition and profile.
  M	Modify a user definition and profile: see Viewing, Adding and Modifying a User.

Viewing, Adding and Modifying a User

To view or modify a user

1. Enter M in the line command field of the selected user on the User List screen and press ENTER.

   Or:
   Use the direct command MODIFY USER as described in the Direct Commands documentation.

   The User Definition and Profile screen appears with the current user definition. You can modify the definition and profile settings in the same way as when adding a user.

2. Press PF5 (Save) to save the modifications. Press PF3 (End) to return to the User List.

To add a user

• Press PF2 (Add) on the User List screen.

  Or:
  Use the direct command ADD USER described in the Direct Commands documentation.

  A User Definition and Profile screen similar to the example below appears:

  19.06.07 ***** Entire Operations ***** 14:17:09 User Definition and Profile ------------------------------------------------------------------------------ Mailboxes User ID ==> ADMIN___ Owner at Logon ==> SYSDBA____ __________ __________ User Type ==> O __________ Profile ==> ________ __________ Language Code ==> 2__ German __________ Email ==> admin(a)company.com__________________________ __________ __________ __________ __________ __________ Profile Settings Administration Functions ==> _ Representation ==> _ Network Maintenance ==> _ Sort Orders ==> _ Reporting ==> _ Selection Criteria ==> _ Monitoring ==> _ Max. Lines in Log Display ==> _______ Command => ____________________________________________________________ Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12--- Help End Save Nodes Owner Menu

This User Definition and Profile screen consists of two sections:

• The User Definition in the upper half of the screen where you define a user to Entire Operations.

  For explanations of the fields, see User Definition and Profile Settings.

• The Profile Settings section in the lower half of the screen where you define the user's profile.

  For explanations of the fields, see the following sections:

  Administration Functions
  Network Maintenance Functions
  Reporting Functions
  Monitoring Functions
  Representation - Display Settings
  Sort Orders in Lists
  Selection Criteria Settings
  Max. Lines in Log Display: User Definition and Profile Settings

Special PF Keys: User Definition and Profile

User Definition and Profile Settings

You define a user to Entire Operations and set main user defaults by using the fields in the upper section of the User Definition and Profile screen.

The fields in the lower section of the User Definition and Profile screen are used to define user privileges for distinct maintenance functions and manage individual preferences for default system settings.

Profile Settings for User Authorization

Defining a user profile consists of authorizing the user for a certain level of activity in the various system facilities.

User authorizations fall into the following groups:

• Administration Functions

• Network Maintenance

• Reporting

• Monitoring

You select a group of functions by entering any character in the appropriate input field and pressing ENTER. A window opens with possible functions, the default authorization value according to user type and, optionally, copied profile.

Authorization Options

The user privileges that can be granted for a function depend on the user type defined for the user: general user (type G), operator (type O) and system administrator (type A).

You can enter one of the following authorization options for each function listed in the window (press ENTER to save modifications, and PF3 to close the window):

Option Setting	Authorization
Y	Allow function.
N	Disallow function.
blank	No access.
R	Read access only (no definition/modification of item allowed).
W	Read/write access (definition/modification allowed, but no delete).
D	Read/write/delete access (all functions allowed).
other option settings	Specific or additional options that can be set for particular profile settings and functions. They are described in the relevant sections of this chapter.

Administration Functions

If you select Administration Functions on the User Definition and Profile screen, you can authorize a user (see Authorization Options) to perform the administration functions described in the following table.

The table indicates the default setting that applies to each user type: A is system administrator, O is operator and G is general user.

Network Maintenance Functions

If you select Network Maintenance on the User Definition and Profile screen, you can authorize a user (see Authorization Options) to perform the job and network maintenance function on the master database described in the following table.

The table indicates the default setting that applies to each user type: A is system administrator, O is operator and G is general user.

Press ENTER to save the authorizations. Press PF3 (End) to close the window.

Reporting Functions

If you select Reporting on the User Definition and Profile screen, you can authorize a user (see Authorization Options) to perform the report functions described in the following table.

The table indicates the default setting that applies to each user type: A is system administrator, O is operator and G is general user.

For detailed information on the reports mentioned in the table, see the section Reporting and Report Types in the User's Guide.

Monitoring Functions

If you select Monitoring on the User Definition and Profile screen, you can authorize a user (see Authorization Options) to perform the operations on jobs in the active database described in the following table.

The table indicates the default setting that applies to each user type: A is system administrator, O is operator and G is general user.

Representation - Display Settings

If you select the Representation option on the User Definition and Profile screen you can specify default display settings. The fields available are described in the following section.

User Attributes for Character Interface and GUI Client

There are three groups of user attributes:

Selection Criteria Settings

If you select Selection Criteria on the User Definition and Profile screen, you can preset selection criteria for network lists.

Sort Orders in Lists

You can set the default sort order for object lists by using the Sort Orders option of the User Definition and Profile screen:

 16-09-08                ***** Entire Operations *****                18:24:24 
                          User Definition and Profile                          
 ------------------------- +--------------------------------------------------+
                           !                                                  !
       User ID ==> EXAMPLE !                                                  !
                           !                  Sort Orders                     !
     User Type ==> A       !                                                  !
       Profile ==> _______ !      Mailbox List            ==> A               !
 Language Code ==> 2__ Ger !      'All active Jobs' List  ==> A               !
         Email ==> _______ !             sorted by        ==> _               !
                           !                                                  !
                           !                                                  !
                           !                                                  !
                           !                                                  !
 Profile Settings          ! Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7--- !
  Administration Functions !       Help        End         Save               !
       Network Maintenance +--------------------------------------------------+
                 Reporting ==> _            Selection Criteria ==> _           
                Monitoring ==> _     Max. Lines in Log Display ==> _______     
                                                                               
 Command => ____________________________________________________________       
                                                                               
                                                                               
Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12---
      Help        End         Save              Nodes Owner             Menu

The fields contained in the window are explained in the following table:

Operating System Server Default User IDs for a User

For each operating system server node a user is working with, you can define a default user ID per user. By default, the content of the Natural system variable *USER (described in the Natural System Variables documentation) is used for a node logon.

For a UNIX or Windows node, you can also specify a group or domain, respectively.

To define operating system server default user IDs

• Press PF8 on the User Definition and Profile screen.

  The following screen appears:

  04.11.08 ***** Entire Operations ***** 14:32:07 User SN Operating System Server Default User IDs ------------------------------------------------------------------------------ Cmd Node User ID Group _ 38 GSM _ 448 sag _ 404 sn _ 403 sn _ 508 sn _ 505 sn _ 501 sn _ _ _ _ _ _ _ _ ******************************* Bottom of Data ******************************* D Delete nter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12--- Help Add End Save Up Down Menu

Special PF Key: Add a User Node/User ID Definition

Line Commands: Delete a User Node/User ID Definition

Definition and Modification of Entries

This is the definition and modification screen:

04.11.08               ***** Entire Operations *****                    11:12:07
 User SN            Operating System Server Default User IDs
 ------------------------------------------------------------------------------
      Cmd  Node               User ID                Group
      _    515                sn
      _    38                 GSM
      _    448    +--------------------------------------------------+
      _    404    !                                                  !
      m    403    !  Node Default User ID for User SN                !
      _    508    !                                                  !
      _    505    !  Node         ==> 403_____________               !
      _    504    !  User ID      ==> sn__________________           !
      _    501    !  Group        ==> SAG-HQ______________           !
      _    507    !                                                  !
      _    510    ! ---PF1---PF3-------PF5-------------------        !
      _    516    !    Help  End       Save                          !
      _    511    +--------------------------------------------------+
      _    408                sn                     sag-hq
      _    509                sn
 *********************************** m o r e **********************************
 D Delete   M Modify
Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12---
      Help  Add   End         Save        Up    Down                    Menu

The Group field is optional. Its usage is:

Adding and Removing User/Owner Links

In addition to the Owner at Logon who must be defined in a user profile, you can link a user to other owners and remove existing links.

If other owners are defined, the user can switch to one of them during the session. The user is also authorized to access the objects belonging to the other owners by using the SET OWNER direct command (see the Direct Commands documentation).

Notes:

1. A user linked to the owner SYSDBA is authorized to access any object in the entire Entire Operations system environment.
2. New owner names must start with a letter and may not contain blanks.
3. Other related topics in the User's Guide are: Owner and Granting Definition: Authorizing Other Users or Owners to Access a Network .

To link a user to additional owners

1. Press PF9 (Owner) on the User Definition and Profile screen.

   An Owner List window similar to the example below opens:

   16-09-09 ***** Entire Operations ***** 13:00:55 User Definition an +-------------------------+ ------------------------------------------- ! ! ------ ! User EXAMPLE ! xes User ID ==> EXAMPLE_ Owner at Logo ! Owner List ! ____ ! PF2: Add 'D' Del. ! ____ User Type ==> A ! ! ____ Profile ==> ________ ! ** Top ** ! ____ Language Code ==> 2__ German ! _ DEMO ! ____ Email ==> _________________________ ! _ EXAMPLE ! ____ ! _ SYSDBA ! ____ ! _ TESTOWNER ! ____ ! _ ZUSRA ! ____ ! ! ____ Profile Settings ! ! Administration Functions ==> _ ! ! Network Maintenance ==> _ ! ! Reporting ==> _ ! ! Monitoring ==> _ Max. Li ! ** Bottom ** ! _ ! --PF3---PF7--PF8--- ! Command => ________________________________ ! End Up Down ! +-------------------------+ Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12--- Help End Save Nodes Owner Menu

2. Press PF2 (Add) to link a new owner.

   A User/Owner Linkage window opens on the left:

   16-09-12 ***** Entire Operations ***** 15:14:29 User Definition an +-------------------------+ ------------------------------------------- ! ! ------ ! User EXAMPLE ! xes User ID ==> EXAMPLE_ Owner at Logo ! Owner List ! ____ ! PF2: Add 'D' Del. ! ____ User Type ==> A ! ! ____ Profile ==> ________ ! ** Top ** ! ____ Language Code ==> 2__ German ! _ DEMO ! ____ Email ==> _________________________ ! _ EXAMPLE ! ____ +-------------------------------------+ ! _ SYSDBA ! ____ ! ! ! _ TESTOWNER ! ____ ! User/Owner Linkage ! ! _ ZUSRA ! ____ ! ! ! ! ____ ! UserID ===> EXAMPLE ! ! ! ! Owner ===> __________ ! ! ! ! ! ! ! ! PF3 End ! ! ! +-------------------------------------+ Li ! ** Bottom ** ! _ ! --PF3---PF7--PF8--- ! Command => ________________________________ ! End Up Down ! +-------------------------+ Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12--- Help End Save Nodes Owner Menu

3. In the Owner field, enter the name of a new owner to whom you want to link the user and press ENTER.

   Or:
   In the Owner field, enter an asterisk (*) to select an owner from a list of available owners:

   16-09-12 ***** Entire Operations ***** 15:36:27 User Definition an +-------------------------+ ------------------------------------------- ! ! ------ ! ! xes User ID ==> EXAMPLE_ Owner at Logo ! ! ____ ! Owner Selection ! ____ User Type ==> A ! ! ____ Profile ==> ________ ! ! ____ Language Code ==> 2__ German ! _ REQUEST ! ____ Email ==> _________________________ ! _ RFA ! ____ +-------------------------------------+ ! _ SAGID ! ____ ! ! ! _ SAGTEST ! ____ ! User/Owner Linkage ! ! _ SAMPLE ! ____ ! ! ! _ SAT331 ! ____ ! UserID ===> EXAMPLE ! ! _ SESSION ! ! Owner ===> *_________ ! ! _ SMR ! ! ! ! _ SN ! ! PF3 End ! ! _ SSL ! +-------------------------------------+ Li ! ! _ ! --PF3---PF7--PF8--- ! Command => ________________________________ ! End Up Down ! +-------------------------+ Enter-PF1---PF2---PF3---PF4---PF5---PF6---PF7---PF8---PF9---PF10--PF11--PF12--- Help End Save Nodes Owner Menu

   In the Owner Selection window, enter any character in the field next to the required owner and press ENTER.

   The owner is added in the User/Owner Linkage window. Press PF3 (End) to close the selection window.

   The new owner is added to the Owner List.

4. Press PF3 (End) to return to the User Definition and Profile screen.

This section covers the following topics:

• Deleting a User/Owner Link

Deleting a User/Owner Link

To delete a user/owner link

• In the Owner List window, enter D in the input field next to the owner from which to unlink the user and press ENTER.

  A confirmation window prompts you to confirm the deletion by entering the name of the owner.

The following applies when deleting an owner from the owner list:

• Once entered, owners can be removed from Entire Operations by calling the Natural program OW-DEL-P.

• The owner cannot be deleted if it is still linked to the following Entire Operations objects: calendar, network, symbol table and/or event.

• Furthermore, an owner cannot be deleted if it is specified as the main owner (Owner at Logon) for any user.

• If an owner is deleted, then all links to the user are removed.

Defining Sub-Administrators

Defining sub-administrators allows you to grant access rights which are not offered by the standard user maintenance facility of Entire Operations.

If the module US-EX--N (delivered with Entire Operations) is not modified, it represents the standard user maintenance facility: Each user is allowed to read, write or delete user definitions, or is excluded from any user maintenance.

To define sub-administrators

• Modify the module US-EX--N contained in the library SYSEORU.

  Using US-EX--N you can define any number of relationships between Entire Operations users.

US-EX--N requires the following parameters:

• USER-1 is the sub-administrator, that is, the user who defines other users. His rights over USER-2 are defined in the specification of a return code.

• USER-2 the user who is defined by USER-1.

• RC (return code) defines the rights of USER-1 and the relationships between USER-1 and USER-2.

The above entries are made in the DISPLAY MODIFY DELETE section of the US-EX--N module.

In the ADD section of US-EX--N, you specify if a sub-administrator is allowed to add other users. In this case, USER-1 must be set to Y. Any entry other than Y signifies that USER-1 is not allowed to create further users. USER-2 is unused.

In the following you will find an example of US-EX--N which you can use to adapt the program to the needs at your site.

The program does not check whether USER-1 and USER-2 belong to the same owner. You can specify sub-administrators independently of their owners. If USER-1 and USER-2 are identical, there are no restrictions.

Example

* US-EX--N
*
* NOP USER Modification
* This exit is called by US-DEF-P and US-LI--P to give certain
* users limited rights on other users (specify Subadministrator)
* MODIFICATIONS:
* 09.01.97 (160039) User exit for defining subadministrators    GFR212
* ----------------------------------------------------
DEFINE DATA
PARAMETER
1 P-USER-1              (A08)     /* IN
1 P-USER-2              (A08)     /* IN
1 P-US-EX-RC            (A1)      /* OUT
*
*
END-DEFINE
* -----------------------
RESET P-US-EX-RC
*
* Users modifies himself
*
IF P-USER-1 = P-USER-2
  P-US-EX-RC := 'Y'
  ESCAPE ROUTINE
END-IF
*
IF P-USER-1 NE ' '
  IF  P-USER-2 NE ' '
* *************************************************************
* DISPLAY MODIFY DELETE - Section
* *************************************************************
    P-US-EX-RC := 'Y'   /*     'R'           means DISPLAY only
                        /*     'Y'           means DELETE MODIFY
* For all users we give back 'Y' as return code
*
* Example for subadministrator ABC
*   IF P-USER-1 = 'ABC'
*     IF P-USER-2 = 'XYZ'
*       MOVE 'Y' TO P-US-EX-RC /* can modify or delete user XYZ
*     ELSE
*       MOVE 'R' TO P-US-EX-RC /* can display all others
*     END-IF
*   END-IF
*
  ELSE
* ****************************************************************
* ADD - Section
* ****************************************************************
*                       /* 'Y' means ADD allowed
    P-US-EX-RC := 'Y'   /*  anything else means ADD not allowed
*
* For all users we give back 'Y' as return code
*
* Example for subadministrator ABC
*   IF P-USER-1 = 'ABC'
*     MOVE 'N' TO P-US-EX-RC /* cannot add any user
*   END-IF
  END-IF
END-IF
END

Deleting a User

To delete a user definition and profile

1. Enter D in the line command field next to the required user listed on the User List screen and press ENTER.

   A window opens in which you can confirm the deletion by entering the user ID.

2. Enter the user ID and press ENTER to perform the deletion and close the window.