IBM Support

Easily compare permissions between two security groups

Technical Blog Post


Abstract

Easily compare permissions between two security groups

Body

Which tables can we query to find out the difference between the access rights between 2 security groups because it's very long to verify them manually on the screen ?

 

Well, it's a good questions, but basically there is a technique that can be used, which is to compare data from some tables as below :

 

The easiest way to view the basic permission information on a SELECT query by groups would be this :

 

SELECT GROUPNAME, APP, OPTIONNAME, CONDITIONNUM FROM APPLICATIONAUTH ORDER BY GROUPNAME;

 

If you would to see more complex info about application access + permissions or security restrictions, then you would need something like this :

 

SELECT * FROM COLLECTIONAUTH ORDER BY GROUPNAME;

SELECT * FROM SECURITYRESTRICT ORDER BY GROUPNAME;

SELECT * FROM APPLICATIONAUTH ORDER BY GROUPNAME, APP;

SELECT * FROM SITEAUTH ORDER BY GROUPNAME, SITEID;

SELECT * FROM LOCAUTH ORDER BY GROUPNAME, SITEID;

 

Good Luck.  

 

See ya

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSLKT6","label":"IBM Maximo Asset Management"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

UID

ibm11112697