I am trying to set up Profiles for our users for our new AS400 utilizing Group Profiles. This security stuff is pretty new to me. It seems that I still have to specifically identify the JOBD, Printer and OUTQ for each individual User even if I've assigned them to a Group as there are no possibilties listed on these keywords that point to the Group. What am I missing?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Group vs. User Profiles
- Thread starter PaulaJ
- Start date
No, that's how it's done. But you can make it easier by creating "generic" profiles, one for each group, and clone them as needed.
HINT: Name the generic profiles starting with '#', so they appear at the top of the list on the WRKUSRPRF display:
#ACCT
#AR
#AP
#HR
#PGMR
#PGMSUP
etc.
"When once you have tasted flight, you will forever walk the Earth with your eyes turned skyward, for here you have been, and there you will always long to return."
--Leonardo da Vinci
HINT: Name the generic profiles starting with '#', so they appear at the top of the list on the WRKUSRPRF display:
#ACCT
#AR
#AP
#HR
#PGMR
#PGMSUP
etc.
"When once you have tasted flight, you will forever walk the Earth with your eyes turned skyward, for here you have been, and there you will always long to return."
--Leonardo da Vinci
- Thread starter
- #3
The # is a Good Idea. So the only thing I'm actually applying to the individual profiles by using the Groups is the authorities. The rest of the keywords don't actually relate to the Group. Should I put the specific Printer/Outq Names in the Group Profile or just let it default? I was hoping to be able to point a Group to a Printer.
Yes, you can point a group to a printer. If you find yourseld moving printers around, you can always use CHGUSRPRF to fix that.
Bear in mind that some applications control the user's printer output as well. Check with the programmers to see if you need to change anything there.
On our system, everybody has an entry in a file with their printing defaults. The entries are used by all the report programs (the users are prompted to change them, or they can leave them the same, each time they run a report). This way, there's no guessing as to where the output goes. But that's an issue for the programmers.
Here's my record, for example:
[tt]
DFTUSR - USER ID........: F_LAPEYRE
DFTOTQ - OUTQ...........: PGMOUT
DFTCOP - COPIES.........: 1
DFTHJQ - HOLD ON JOBQ...: *NO
DFTHOQ - HOLD ON OUTQ...: *YES
DFTSAV - SAVE OUTPUT....: *NO
DFTNIT - SUBMIT TO NIGHT: *NO[/tt]
"When once you have tasted flight, you will forever walk the Earth with your eyes turned skyward, for here you have been, and there you will always long to return."
--Leonardo da Vinci
Bear in mind that some applications control the user's printer output as well. Check with the programmers to see if you need to change anything there.
On our system, everybody has an entry in a file with their printing defaults. The entries are used by all the report programs (the users are prompted to change them, or they can leave them the same, each time they run a report). This way, there's no guessing as to where the output goes. But that's an issue for the programmers.
Here's my record, for example:
[tt]
DFTUSR - USER ID........: F_LAPEYRE
DFTOTQ - OUTQ...........: PGMOUT
DFTCOP - COPIES.........: 1
DFTHJQ - HOLD ON JOBQ...: *NO
DFTHOQ - HOLD ON OUTQ...: *YES
DFTSAV - SAVE OUTPUT....: *NO
DFTNIT - SUBMIT TO NIGHT: *NO[/tt]
"When once you have tasted flight, you will forever walk the Earth with your eyes turned skyward, for here you have been, and there you will always long to return."
--Leonardo da Vinci
- Thread starter
- #5
OK. Really low level. I put the Printer Name in the Group Profile for the "PRTDEV" keyword. What do I put in the Individual Profile for "PRTDEV"? The only 3 options are the Name, *WRKSTN, or *SYSVAL. None of these options appear to point to the Group Profile. Thanks for sticking with me. The IBM instructions are minimal regarding interactions of this type.
PRTDEV is there to point to a hardware device. If users are using IPDS ar AFP printers (with overlays, or OfficeVision - perish the thought!), you need to point them to an IPDS or AFP capable printer in that keyword. It's really the OUTQ that directs printer output. Take my example: I compile a lot of programs, so I don't want compile listings to automatically print. PGMOUT is an output queue which is not attached to a writer. If I want to print a listing, I just move it to an outq which has a printer writer started and release the spool file.
Look at some profiles on the old system, and see what the PRTDEV is set to - I think the default is *SYSVAL.
"When once you have tasted flight, you will forever walk the Earth with your eyes turned skyward, for here you have been, and there you will always long to return."
--Leonardo da Vinci
Look at some profiles on the old system, and see what the PRTDEV is set to - I think the default is *SYSVAL.
"When once you have tasted flight, you will forever walk the Earth with your eyes turned skyward, for here you have been, and there you will always long to return."
--Leonardo da Vinci
- Status
Similar threads
- Locked
- Question