Roles and permissions

The following table lists the user roles for BMC AMI Log Master for Db2 and describes their typical tasks:

Role	Description
System programmer	As the system programmer, you install and maintain the operating system and install, upgrade, and maintain products that run on the system. To install BMC AMI Log Master for Db2, your user ID must have the following permissions: Allocate and manage product libraries and data sets. Add the load library to an APF-authorized library. Update STEPLIB concatenations and system configuration members. Read, write, and execute in SMP/E target and distribution libraries. Submit jobs and manage JCL for installation and maintenance.
Security administrator	As the security administrator, you work with the system programmer to plan and implement external security manager (ESM) user IDs, initial passwords, and password policies. Your user ID must have the following permissions: Add, edit, and delete ESM user profiles. Grant access to Log Master data sets and Db2 logs. Define resource classes and profiles for APF-authorized libraries. Configure SSL certificates if required for secure connections.
Db2 Database Administrator (Db2 DBA)	As the Db2 DBA, you configure and use Log Master to define log scans, generate SQL/DDL, create logical logs, and perform recovery and migration tasks. Your user ID must have the following permissions: Access to the Db2 active and archive logs via the ALPMAIN program. SELECT authority for tables you wish to process with Log Master.
Application developer	As the application developer, you review audit outputs and logical logs to validate application changes and support logical backout when needed. Your user ID must have the following permissions: Read access to audit reports and logical logs. Limited authority to submit analysis jobs. Access to development data sets for storing outputs. Access to the Db2 active and archive logs via the ALPMAIN program. SELECT authority for tables you wish to process with Log Master.
System operator	As the system operator, you monitor mainframe messages and job execution for unusual activity. You also work with the system programmer and Db2 DBA to make sure the system is healthy and functioning as expected. Your user ID must have the following permissions: Read access to job output data sets and system logs. Authority to restart or cancel jobs if required.
Security or compliance analyst	As the security/compliance analyst, you use audit reports and logical logs to investigate activity and maintain compliance. Your user ID must have the following permissions: Read access to audit reports and logical logs. Authority to archive compliance artifacts.