User group profiles

What individual users see and do when they log on to the WUI can be controlled by the user group profile to which they belong.

This gives WUI administrators the ability to tailor the WUI to the needs of various groups of users. You can, for example, use the view editor to create a new WUI menu containing only operations views and make this the default menu for a group of users. This would provide a simplified operational WUI for users who only need to carry out this kind of task.

A user group profile can contain the following information:
  • Result set warning count
  • Name of the default main menu
  • Name of the default navigation menu
  • Default context
  • Default scope
  • Default CMAS context
  • Force filter confirmation flag
  • Default map objects
If a profile does not have some of these values specified; for example if the default menu value is blank, the corresponding WUI parameter value specified in the JCL is used. This is also the case for any invalid values set in the profile, for example if the specified default menu does not exist.

User group profiles are created and managed using the user editor, which can be accessed by administrators with the necessary authority from the WUI navigation menu. See "Controlling access to Web User Interface resources"

To facilitate this CICSPlex® SM uses an object called a user group. User group objects, like view and menu objects, can be imported and exported using the COVC transaction.

User group profiles can be used only if security is active in the Web User Interface. A user group object relates to a group name in the external security manager (ESM). When a user signs on to the Web User Interface, the user group object is assigned in different ways depending on the SIGNONPANEL Web User Interface system parameter.
SIGNONPANEL(ENHANCED)
This is the default. The GROUP option is displayed on the sign-on screen:
  • If the user does not enter a value, the user group profile is set according to the user's default group.
  • If the user does enter a value, the signon proceeds.
  • If the user ID is connected to the specified group, this group is used as the WUI user group profile.
  • If the user ID is not connected to the specified group, or the group name is not valid, the signon continues but the WUI User group profile is set based on the default group of the user and when sign-on is complete message EYUVC1227W is issued to the WUI user and message EYUVS0024W is written to the WUI server's EYULOG.
Note: The GROUP option does not change the current connect group of the user being signed on. The security environment built by the WUI is always based on the user's default group. The only effect that the group option on the WUI signon screen has is to specify which WUI user group profile the user should be associated with. It does not change any security decisions that might be made by the External Security Manager.
SIGNONPANEL(BASIC):
  • The GROUP option is not displayed on the sign-on screen.
  • The user group profile is set according to the user's default group.

Whether the Web User Interface user group profile is set based on the default group, or specified on the GROUP option, if no matching Web User Interface group profile is found, the values normally set via a user group profile is set based on system defaults.

Note: The Web User Interface supports user group names that contain only the following characters:
  • A through Z (you can enter lowercase characters but they are folded to uppercase)
  • 0 through 9
  • # (X'7B'), £ (X'5B'), @ (X'7C'), * (X'5C'), & (X'50') = (X'7E') and ? (X'6F')
Depending on the ESM in use, not all of these characters can be specified in a group name.

Use of * (X'5C') in a user group name causes some restrictions if the COVC EXPORT function is used. See the description of the Name field in Exporting WUI definitions for details.

In order to manage user group profiles an administrator needs update access to a new ESM facility profile named EYUWUI.wui_server_applid.USER where wui_server_applid is the application ID of the WUI server to which this profile relates.