Checking the default User Profile


User Profiles define the operating characteristics for a product session, including the authorizations granted to individual users.

To make the job of administration easier, the product automatically generates a User Profile the first time a user tries to sign on by copying the default User Profile loaded during installation (called 9DEFAULT).

Error
Warning

The 9DEFAULT records shipped in the SECURITY and PROFILE data sets contain default values that grant maximum authority to users. If you want to use the 9DEFAULT profile but do not want all users to have maximum authority, you must modify the 9DEFAULT profile before users access the product. Alternatively, you can delete the 9DEFAULT profile to prevent unauthorized access. BMC recommends that you copy the 9DEFAULT profile to another profile (8DEFAULT, for example) and create a User Profile with maximum authority for yourself first.

Before making the product available to multiple users in your environment, check the authorizations in the 9DEFAULT profile to make sure they are consistent with the security strategy at your site. User Profiles are discussed in detail in the System-and-SQL-Performance-for-Db2-administration.

Extensive online Help exists for all panels and their associated fields. If you press F1 while the cursor is positioned on a text-only area of a panel, a description of that panel is displayed. If you press F1 while the cursor is positioned on an input or output field on a panel, specific information about that field is displayed.

To view and modify User Profile values

  1. Select option 1 (User Profiles) from the Administration menu.The User Profile Administration panel is displayed:

     DOMEPRFU/P               User Profile Administration           LINE 195 OF 196
     Command ====> _______________________________________________ Scroll ===> CSR_
                                                                                   
                                                                                   
     To add a profile, type the name in the 'New profile' field, and/or type one    
     or more action codes.  Then press Enter.                                       
       V -View       M -Modify     D -Delete     C -Copy                            
                                                                                   
      New profile   ________                                                        
                                                                                   
     Act Name      Description                      Last change date    Changed by  
     --- --------  ------------------------------   -----------------   ----------  
      M  USER01    DEFAULT PROFILE                  1998-10-14 07:58    9DEFAULT
     _   9DEFAULT  DEFAULT PROFILE                  1998-10-08 11:03    BMCSftwr
  2. Move the cursor to the Act field beside the User Profile of the product administrator. Type M (Modify) and press Enter.The User Profile Data Menu is displayed:

    DOMEUPR0/I                  User Profile Data Menu                    15:46:29
    Command ====>                                                                 
                                                                                  
    User name : USER01
                                                                                  
    Type an optional description for this user in the field below.                 
     Description  DEFAULT_PROFILE_______________                                   
                                                                                  
    Select one of the following options.  Then press Enter.                        
                                                                                  
    _ A. Authorization          - Display authorization values that can be set     
                                  only by an administrator.                        
      1. Session Control        - Parameters that control the user's session       
      2. Not available                                                             
                                                                                  
    The following values cannot be locked from user update.                        
      3. Session Options        - Parameters that customize the session            
      4. Presentation Options   - Parameters that control language and formatting  
      5. Function Keys          - Function key values
  3. Press F3 to exit.A confirmation panel is displayed.
  4. Select option 1 (Save changes) and press Enter.

    Warning

    Important

    An individual security record is not created until a User Profile is modified. By opening and saving the User Profile of the product administrator before modifying the 9DEFAULT User Profile, you ensure that the administrator retains maximum authority.

  5. Repeat Step 2 through Step 4, selecting the 9DEFAULT User Profile.
  6. Review each option on the User Profile Data Menu carefully, especially option A (Authorization) and option 1 (Session Control).

    • Use Authorization (option A) to display authorization values that can be set only by an administrator:
      • Data Collector access
      • Db2 access
      • product access
    • Use Session Control (option 1) to set the parameters that control access to product functions and limit resource use.
    • Use Session Options (option 3) to set characteristics for the user’s session (for example, placement of Command line and display of panel ID).
    • Use Presentation Options (option 4) to set the parameters that control the presentation of data on your screen (for example, upper- or mixed-case, date style, and decimal style).
    • Use Function Keys (option 5) to set function key defaults.
  7. Press F3 to exit the User Profile Data Menu.A confirmation panel is displayed.
  8. Select option 1 to save your changes.
  9. Press F3 until the main menu is displayed. Leave your product session active.


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

Common Db2 documents 12.1