Need Help for Logic Authorization Data to Information server

[pran.praveen]

Hi All,

Need one help for the below logic. I am not getting clue.

I am receiving 2 files from External System . File A,Flie B.
File A-Contain the list of the user of information server.
File B-get the list of entitlements (role )for the corresponding users.
After applying the Roles to the user , I have to update the Information Server (IS) on the daily Basis.
The Users in IS should update on daily Basis with the information from External System.


I am not understanding ,How to develop the jobs. I cab read these to services and can create the tables /file.
But HOw to update the Information server . Which Tables/Files.

Any help appreciated here. Or did anyone has updated the Information server -User details with datastage Jobs.

[chulett]

Some questions, mostly out of curiosity, since this seems like a somewhat odd request to me. What aspect of the users are you attempting to maintain, strictly their security roles? What is this 'external system'? What registry are you currently using - the internal one, LDAP, local O/S?

[ray.wurlod]

It is generally not a good idea to try to manipulate the internal tables directly, as mistakes will tend to be catastrophic.

At version 11 there is a suite of command lines that you can use to work with user accounts in terms of assignment to roles.

Do you also need to revoke roles if users are no longer in the daily list? If so, you have a bit more planning to do.

You can certainly use DataStage (probably sequence job) to control all of this, noting that other tools could also be used.

[pran.praveen]

Hi Ray/chulette, Thanks for reply.
@Ray-Yes want to revoke/delete the user and roles in daily basis if user doesn't leave the organization.
Can you elaborate how to plan and proceed. I have limited knowledge in Admin Side. I always create users and map role through WebConsole.

The same thing they want Automated through Data stage JObs. I will receive 2 files as mentioned earlier based on thet ,need to create userid/pwd and map roles and map to specific project.

I searched and found..
IBM Infosphare Data click-- Directory command tool like below:-

DirectoryCommand
[-{add_ds_credentials | ds_cred} value]
[-{add_group | a_grp} value]*
[-{add_user | a_usr} value]*
[-{add_users_group | a_usr_grp} value]*

Is it unix command that I can execute through Execute command.
Or you have any other idea...which other tools could we used.
Which System tables Datastage usese in case of User id creation and deletion ....

Please elaborate and I am looking for your input.


@Chulette- I am not sure registry type-Internal or LDAP...I think it's LDAP.
External system is client system where they get request to create user id for IBM Information Server.

Here what I understand that They want to perform the same task ..create user,delete user, map roles what normaly we do it from Web Console.

If other way if you think....help appreciated.

[pran.praveen]

Hi All,

Any idea for the mentioned issue. Also is there any way by which we can find the All the user details with their roles.

I need to list all the user name ,roles,permission.

Or Have to do it manually through Web console.

Thanks in Advance

[ray.wurlod]

You can create a "List of Users" report in the Reporting tab of the Web console for Information Server. This report can be executed automatically as a scheduled report.

[pran.praveen]

@Ray-Thanks..But I am getting the error.Report is aborting.

Is there any way from XMeta we can find .or running command through Ds Admin client.
Once I am running this command getting only 2 entry.

SH -c "`cat /.dshome`/bin/list_readu | grep DS.ADMIN"


Can you suggest something here.

[chulett]

Post the error.

[ray.wurlod]

The list_readu command only shows connected DataStage clients.