(iSeries)

Revoking authority to a profile using the IBM i command line using wsadmin scripting

To revoke authority to objects and directories in a profile, run the rvkwasaut script from the Qshell command line.

To run the script, follow these steps:

Tasks

1. On the IBM i command line, run the STRQSH (Start Qshell) command.

2. On the Qshell command line, use the cd command to change to the directory containing the script:

   cd app_server_root/bin
   

3. Run the rvkwasaut script:

   rvkwasaut -profileName profile [-user usrprf | -authlist authlist]
   

   where profile is the profile to which we want are revoking authority, usrprf is the user profile from which we are revoking authority, and authlist is the authorization list from which we are revoking authority. We do not need to specify both the -user and -authlist parameters, but specify at least one of them. For more information on the rvkwasaut script and additional parameters, see rvkwasaut command.

Example

In the following example, the user profile jsmith no longer has authority to the profile devinst:

rvkwasaut -profileName devinst -user jsmith -recursive

In the example, the user profile jsmith no longer has authority to the installedApps subdirectory and all nested objects in the installedApps subdirectory.

rvkwasaut -profileName devinst -object installedApps -user jsmith -recursive

Granting authority to a profile using the IBM i command line