Configuring access to FMT FIN operation commands

Before an FMT FIN operator can issue the commands described in FMT FIN operation commands, you must configure the attributes that allow users to access them. To help you do this, FTM SWIFT generates, during customization, for each business OU, a script with a name of the form:

deployment_dir/instance/admin/ou_dnfcpcac.cli

where:

deployment_dir: Directory specified in the CDP initialization file.
instance: Name of the instance.
ou: Name of the OU.

These scripts contain the following commands:

add -ou DNIvOU -ct DnfAccessControlFmtf -co <lt_name> -attr FMTENABLE 
add -ou DNIvOU -ct DnfAccessControlFmtf -co <lt_name> -attr FMTDISABLE
add -ou DNIvOU -ct DnfAccessControlFmtf -co <lt_name> -attr FMTSTART
add -ou DNIvOU -ct DnfAccessControlFmtf -co <lt_name> -attr FMTSTOP
add -ou DNIvOU -ct DnfAccessControlFmtf -co <lt_name> -attr FMTRESET
add -ou DNIvOU -ct DnfAccessControlFmtf -co <lt_name> -attr RECOVER
add -ou DNIvOU -ct DnfAccessControlFmtf -co <lt_name> -attr QUERY
add -ou DNIvOU -ct DnfAccessControlFmtf -co <lt_name> -attr SEND
com -ou DNIvOU

The customization process substitutes the placeholder DNIvOU in the script with the name of the OU. Modify and run this script once for each LT:

Copy the script into the home directory.
Replace the following item in the copy of the script as required:

<ltname>

The name of the logical terminal. It must be the LT name provided by SWIFT.
Run the modified copy of the dnfcpcac.cli script. This requires the access rights provided by the system configuration administrator (DniSA) role:
```
dnicli -i instance -ou SYSOU -s DNI_SYSADM -cft dnfcpcac.cli -cp IBM-1047
```
Approve and deploy the changes:
```
dnicli -i instance -ou SYSOU -s DNI_SYSADM 
app -ou ou
dep -ou ou
```
If dual authorization is enabled, another user with the appropriate access rights must approve the changes before they can be deployed. If dual authorization is disabled, you can skip approving the changes and immediately deploy them.