(iseries)

Granting authority to a profile using the IBM i command line

To grant authority to objects and directories in a profile, run the grtwasaut command from the Qshell command line.

To run the script, perform the following steps:

1. On the IBM i command line, run the STRQSH (Start Qshell) command.

2. On the Qshell command line, use the cd command to change to the directory containing the script:
   cd app_server_root/bin

3. Run the grtwasaut command:

   grtwasaut -profileName profile [ -user usrprf | -authlist authlist ]
    -dtaaut dataAuth -objaut objAuth

   where profile is the profile to which we are granting authority, usrprf is the user profile to which we are granting authority, authlist is the authorization list to which we are granting authority, dataAuth specifies the data authorities that you are granting to the user specified by the -user parameter, and objAuth specifies the object authorities that you are granting to the user specified by the -user parameter. You do not need to specify both the -user and -authlist parameters, but specify at least one of them. For more information on the grtwasaut command and additional parameters, see topics about the grtwasaut command.

Example

In the following example, the user profiles johndoe and jsmith are granted rwx authority to the profile devinst and the associated objects.

grtwasaut -profileName devinst -user "johndoe jsmith" -dtaaut rwx -recursive

In the following example, the user profiles johndoe and jsmith are granted rwx authority to the installedApps subdirectory and all nested objects in the installedApps subdirectory.

grtwasaut -profileName devinst -object installedApps -user "johndoe jsmith" -dtaaut rwx -recursive

Related tasks

Revoking authority to a profile using the IBM i command line