7.2.1 Unit owner permission
The JP1 user who defines a job or jobnet has owner permission for that unit. The JP1 user with owner permission can change the name of the JP1 resource group, the owner, and the type of user who can execute jobs (the execution user), regardless of the JP1 permission level. However, if a JP1 resource group without reference permission for that unit is set, even the owner of the unit cannot change the JP1 resource group name, the owner, or the type of job execution user. This is because the Detailed Definition dialog box for the unit cannot be opened in JP1/AJS3 - View. For a unit owner to be able to make these changes, the unit owner needs to change the JP1 resource group, as another JP1 user, to a JP1 resource group for which the unit owner has the view permission.
In addition, if no owner is set for a unit, then any user can change the name of the JP1 resource group, the owner, or the execution user.
If the owner of a job is changed, the value set for the type of the job execution user changes from User who owns to User who registered. This prevents the job from being unintentionally executed by the new owner. If the type of user who can execute a job changes to User who registered, the job is executed by the JP1 user who registered the job for execution. Even if you change the owner in the cases below, the type of the job execution user is not changed to User who registered.
-
The ADMACLIMIT environment setting parameter is omitted or no is set for it, and the JP1 user who performs the operation is mapped to one of the following OS users who have administrative permissions.
-
In Windows
A JP1 user mapped to an OS user who has administrator privileges.
-
In UNIX
A JP1 user mapped to an OS user who has superuser privileges.
-
-
A resource group and owner are set for the job targeted by the operation, and the JP1 user who performs the operation has the JP1_AJS_Admin permission for that resource group.