8.3.3 Setting JP1 user operating permissions
You must set the JP1 user operating permissions from an authentication server (a primary authentication server). For this setting, you set what kind of operations are permitted to JP1 users (the JP1 permission level) when they operate JP1 resource groups, such as jobs and jobnets.
- Note
-
You can only set operating permissions for jobs and jobnets for which you have specified JP1 resource group names with JP1/AJS. For other jobs and jobnets, all types of access by all JP1 users are permitted.
You can either set operating permissions for multiple JP1 users simultaneously or register or delete operating permissions for individual JP1 users.
The following describes how to set operating permissions for JP1 users.
- Organization of this subsection
(1) Setting operating permissions for multiple JP1 users simultaneously
You can use a command to set operating permissions for multiple JP1 users simultaneously. To do this, define operating permissions in the user permission level file (JP1_UserLevel). After editing the file, execute the jbsaclreload command to apply the settings. For details on the jbsaclreload command, see jbsaclreload in 15. Commands. For details on the user permission level file, see User permission level file in 16. Definition Files.
(2) Registering operating permissions for individual JP1 users
To add or modify operating permissions for individual JP1 users, you must create a definition file that describes operating permissions given to each JP1 user you want to register.
You can create the definition file in any location. The file format is the same as that of the user permission level file (JP1_UserLevel). For details on the user permission level file, see User permission level file in 16. Definition Files.
After preparing the definition file, execute the following command to register the information in the definition file with the authentication server:
jbssetacl -f definition-file-name
For details on the jbssetacl command, see jbssetacl in 15. Commands.
(3) Deleting operating permissions for individual JP1 users
To delete operating permissions for a registered JP1 user, execute the following command:
jbsrmacl -u JP1-user-name
Note that this command deletes all operating permissions that have been given to the specified JP1 user.
For details on the jbsrmacl command, see jbsrmacl in 15. Commands.