Need Help for Logic Authorization Data to Information server
Moderators: chulett, rschirm, roy
-
- Premium Member
- Posts: 20
- Joined: Tue Jun 22, 2010 9:02 am
Need Help for Logic Authorization Data to Information server
Hi All,
Need one help for the below logic. I am not getting clue.
I am receiving 2 files from External System . File A,Flie B.
File A-Contain the list of the user of information server.
File B-get the list of entitlements (role )for the corresponding users.
After applying the Roles to the user , I have to update the Information Server (IS) on the daily Basis.
The Users in IS should update on daily Basis with the information from External System.
I am not understanding ,How to develop the jobs. I cab read these to services and can create the tables /file.
But HOw to update the Information server . Which Tables/Files.
Any help appreciated here. Or did anyone has updated the Information server -User details with datastage Jobs.
Need one help for the below logic. I am not getting clue.
I am receiving 2 files from External System . File A,Flie B.
File A-Contain the list of the user of information server.
File B-get the list of entitlements (role )for the corresponding users.
After applying the Roles to the user , I have to update the Information Server (IS) on the daily Basis.
The Users in IS should update on daily Basis with the information from External System.
I am not understanding ,How to develop the jobs. I cab read these to services and can create the tables /file.
But HOw to update the Information server . Which Tables/Files.
Any help appreciated here. Or did anyone has updated the Information server -User details with datastage Jobs.
Praveen
Some questions, mostly out of curiosity, since this seems like a somewhat odd request to me. What aspect of the users are you attempting to maintain, strictly their security roles? What is this 'external system'? What registry are you currently using - the internal one, LDAP, local O/S?
-craig
"You can never have too many knives" -- Logan Nine Fingers
"You can never have too many knives" -- Logan Nine Fingers
-
- Participant
- Posts: 54607
- Joined: Wed Oct 23, 2002 10:52 pm
- Location: Sydney, Australia
- Contact:
It is generally not a good idea to try to manipulate the internal tables directly, as mistakes will tend to be catastrophic.
At version 11 there is a suite of command lines that you can use to work with user accounts in terms of assignment to roles.
Do you also need to revoke roles if users are no longer in the daily list? If so, you have a bit more planning to do.
You can certainly use DataStage (probably sequence job) to control all of this, noting that other tools could also be used.
At version 11 there is a suite of command lines that you can use to work with user accounts in terms of assignment to roles.
Do you also need to revoke roles if users are no longer in the daily list? If so, you have a bit more planning to do.
You can certainly use DataStage (probably sequence job) to control all of this, noting that other tools could also be used.
IBM Software Services Group
Any contribution to this forum is my own opinion and does not necessarily reflect any position that IBM may hold.
Any contribution to this forum is my own opinion and does not necessarily reflect any position that IBM may hold.
-
- Premium Member
- Posts: 20
- Joined: Tue Jun 22, 2010 9:02 am
Hi Ray/chulette, Thanks for reply.
@Ray-Yes want to revoke/delete the user and roles in daily basis if user doesn't leave the organization.
Can you elaborate how to plan and proceed. I have limited knowledge in Admin Side. I always create users and map role through WebConsole.
The same thing they want Automated through Data stage JObs. I will receive 2 files as mentioned earlier based on thet ,need to create userid/pwd and map roles and map to specific project.
I searched and found..
IBM Infosphare Data click-- Directory command tool like below:-
DirectoryCommand
[-{add_ds_credentials | ds_cred} value]
[-{add_group | a_grp} value]*
[-{add_user | a_usr} value]*
[-{add_users_group | a_usr_grp} value]*
Is it unix command that I can execute through Execute command.
Or you have any other idea...which other tools could we used.
Which System tables Datastage usese in case of User id creation and deletion ....
Please elaborate and I am looking for your input.
@Chulette- I am not sure registry type-Internal or LDAP...I think it's LDAP.
External system is client system where they get request to create user id for IBM Information Server.
Here what I understand that They want to perform the same task ..create user,delete user, map roles what normaly we do it from Web Console.
If other way if you think....help appreciated.
@Ray-Yes want to revoke/delete the user and roles in daily basis if user doesn't leave the organization.
Can you elaborate how to plan and proceed. I have limited knowledge in Admin Side. I always create users and map role through WebConsole.
The same thing they want Automated through Data stage JObs. I will receive 2 files as mentioned earlier based on thet ,need to create userid/pwd and map roles and map to specific project.
I searched and found..
IBM Infosphare Data click-- Directory command tool like below:-
DirectoryCommand
[-{add_ds_credentials | ds_cred} value]
[-{add_group | a_grp} value]*
[-{add_user | a_usr} value]*
[-{add_users_group | a_usr_grp} value]*
Is it unix command that I can execute through Execute command.
Or you have any other idea...which other tools could we used.
Which System tables Datastage usese in case of User id creation and deletion ....
Please elaborate and I am looking for your input.
@Chulette- I am not sure registry type-Internal or LDAP...I think it's LDAP.
External system is client system where they get request to create user id for IBM Information Server.
Here what I understand that They want to perform the same task ..create user,delete user, map roles what normaly we do it from Web Console.
If other way if you think....help appreciated.
Praveen
-
- Premium Member
- Posts: 20
- Joined: Tue Jun 22, 2010 9:02 am
-
- Participant
- Posts: 54607
- Joined: Wed Oct 23, 2002 10:52 pm
- Location: Sydney, Australia
- Contact:
You can create a "List of Users" report in the Reporting tab of the Web console for Information Server. This report can be executed automatically as a scheduled report.
IBM Software Services Group
Any contribution to this forum is my own opinion and does not necessarily reflect any position that IBM may hold.
Any contribution to this forum is my own opinion and does not necessarily reflect any position that IBM may hold.
-
- Premium Member
- Posts: 20
- Joined: Tue Jun 22, 2010 9:02 am
-
- Participant
- Posts: 54607
- Joined: Wed Oct 23, 2002 10:52 pm
- Location: Sydney, Australia
- Contact: