Permit access to profiles
To be authorized for an OMEGAMON enhanced 3270 user interface protected resource, a user or group must be permitted access to the associated resource profile.
About this task
The following list describes the authorizations that are needed:
- To log on to the enhanced 3270 user interface, a user requires READ access authority to the logon profile.
- To transmit a Take Action request from the enhanced 3270 user interface to a product agent instance, a user requires UPDATE access authority to the Take Action profile. Note that if no matching SAF profile exists to protect a Take Action, that Take Action command is denied.
- To issue a query request from the enhanced 3270 user interface to a product agent instance, a user requires READ access authority to the query profile.
- To perform various enhanced 3270 user interface administrative activities, a user requires READ access to profiles that correspond to the function. These profiles begin with
KOBUI.ADMIN.
Your security administrator will know best how to grant permissions to access these resources.
Example
As an example, assuming a SAF class name of $KOBSEC, your security administrator can allow a user or group access to the following enhanced 3270 user interface resource profiles by entering the following commands:
PERMIT KOB.LOGON.** ID(userid) ACCESS(READ) CLASS($KOBSEC)
PERMIT Kpp.**.TAKEACTION ID(userid) ACCESS(UPDATE) CLASS($KOBSEC)
PERMIT Kpp.** ID(userid) ACCESS(READ) CLASS($KOBSEC)
PERMIT KOBUI.ADMIN.** ID(userid) ACCESS(READ) CLASS($KOBSEC)