7.1.2 User management using the user mapping function of JP1/Base
The JP1/Base user mapping function allows you to manage the operational permission of users in JP1/AJS3.
When a job or command is executed, user mapping compares the JP1 user at the source host where the execution request originated with the OS users registered in the OS of the execution target host.
User mapping is defined in the JP1/Base environment settings on each host. User mapping at a manager host maps OS users registered in the manager host to JP1 users who log in to the manager host. User mapping for an agent host specifies the manager host where the execution request originated as the server host, and maps the OS users of the agent host to the JP1 users.
Consequently, when a user at a manager host wants to execute a jobnet or a command at an agent host or another manager host, operations at each agent host are conducted in accordance with the user mapping definitions at that local host.
An example of user mapping is shown in the following figure.
|
|
![[Figure]](GRAPHICS/ZUF08020.GIF)
In the example shown, if the JP1 user called jp1user1 executes a jobnet at HostA, and the execution target host is HostC, then the HostC OS user called operator, specified by the user mapping definitions at HostC, executes the jobs. Similarly, if the execution target host is HostD then the HostD OS user called operator, specified by the user mapping definitions at HostD, executes the jobs. In the same way, if jp1user2 executes a jobnet at HostA, then the OS users specified by the user mapping definitions at HostC and HostD execute the jobs. In contrast, if jp1user1 executes a jobnet at HostB, then the jobs can only be executed if HostD is the execution target host, because the user mapping at HostD also includes a user mapping specifying HostB as the server host. The jp1user1 in the HostC user mapping definitions does not specify jp1user1 of HostB, and so the jobs cannot be executed at HostC. If jp1user2 executes a jobnet at HostB, then the jobs cannot be executed at HostC or HostD, as neither host has a mapping definition for jp1user2 of HostB.