---

HMC Manual Reference Pages  - MKACCFG (1)

---

mkaccfg - create access control object

CONTENTS

Synopsis
Description
Options
Examples
Environment
Bugs
Author
See Also

mkaccfg -t {resourcerole | taskrole}
{-f configuration-file | -i "configuration-data"}
[--help]

mkaccfg creates a new access control role.

-t	The type of access control role to create. Valid values are resourcerole for managed resource role and taskrole for task role.
-f	The name of the file containing the configuration data needed to create the access control role. The configuration data consists of attribute name/value pairs, which are in comma separated value (CSV) format. These attribute name/value pairs form a configuration record. A line feed marks the end of a configuration record. There can only be one configuration record in the file. The format of a configuration record is as follows: attribute-name=value,attribute-name=value,...<LF> Note that certain attributes accept a comma separated list of values, as follows: "attribute-name=value,value,..." ,...<LF> When a list of values is specified, the attribute name/value pair must be enclosed in double quotes. Depending on the shell being used, nested double quote characters may need to be preceded by an escape character, which is usually a ’#146; character. Attribute names for managed resource roles (all attributes are required): name name of the managed resource role to create resources comma separated list of managed resource objects Attribute names for task roles (all attributes are required): name name of the task role to create resources comma separated list of tasks parent name of the parent task role on which to base this task role. Valid values are hmcsuperadmin, hmcoperator, hmcviewer, hmcpe, hmcservicerep, hmcclientliveupdate, or a user-defined task role. The -f and the -i options are mutually exclusive.
-i	This option allows you to enter configuration data on the command line, instead of using a file. Data entered on the command line must follow the same format as data in a file, and must be enclosed in double quotes. The -i and the -f options are mutually exclusive.
--help	Display the help text for this command and exit.

Create a managed resource role using the configuration data in the file /tmp/mr1file:

mkaccfg -t resourcerole -f /tmp/mr1file

Create a task role named tr1:

mkaccfg -t taskrole -i "name=tr1,parent=hmcsuperadmin,
"resources=cec:ChangeCoD+ListCoDInformation+
ListCECProperty,lpar:ChangeLPARProperty+ListLPARProperty+
CreateProfile""

None

None

IBM Austin

chaccfg, lsaccfg, rmaccfg