Revoking authority to a profile using the IBM i command line using wsadmin scripting

To revoke authority to objects and directories in a profile, run the rvkwasaut script from the Qshell command line.

About this task

To run the script, follow these steps:

Procedure

  1. On the IBM® i command line, run the STRQSH (Start Qshell) command.
  2. On the Qshell command line, use the cd command to change to the directory that contains the script:
    cd app_server_root/bin
  3. Run the rvkwasaut script:
    rvkwasaut -profileName profile [-user usrprf | -authlist authlist]
    where profile is the profile to which you want are revoking authority, usrprf is the user profile from which you are revoking authority, and authlist is the authorization list from which you are revoking authority. You do not need to specify both the -user and -authlist parameters, but you must specify at least one of them. For more information on the rvkwasaut script and additional parameters, see the rvkwasaut command article.

Example

In the following example, the user profile jsmith no longer has authority to the profile devinst:
rvkwasaut -profileName devinst -user jsmith -recursive
In the example, the user profile jsmith no longer has authority to the installedApps subdirectory and all nested objects in the installedApps subdirectory.
rvkwasaut -profileName devinst -object installedApps -user jsmith -recursive



In this information ...


IBM Redbooks, demos, education, and more

(Index)

Use IBM Suggests to retrieve related content from ibm.com and beyond, identified for your convenience.

This feature requires Internet access.

Task topic    

Terms of Use | Feedback

Last updated: Oct 21, 2010 5:30:17 AM CDT
http://www14.software.ibm.com/webapp/wsbroker/redirect?version=compass&product=was-nd-iseries&topic=txml_irevokeauth
File name: txml_irevokeauth.html