HP 3000 Manuals HP 3000 Manuals
ALTACCT
The ALTACCT command enables a system administrator to change the
parameters of an existing account.
Syntax
ALTACCT acctname [;PASS=[password]][;CAP=[capabilitylist]]
[;ACCESS=[(fileaccess)]]
Parameters
acctname Specifies the name of the account that you want to
alter. The name must consist of one to eight
alphanumeric characters, beginning with an
alphabetic character.
PASS Specifies the account password, only used for
verifying logon access. Entering the ALTACCT
command without this parameter retains the current
password. Entering PASS without specifying
password removes the existing password. Entering
PASS and specifying password changes the current
password or creates one if a password did not
previously exist.
CAP Specifies the list of capabilities permitted for
this account that were assigned with the NEWACCT
command. Each capability is indicated by a
two-letter mnemonic, separated by commas, as
follows:
SM = System manager
AM = Account manager[REV DEL]
DI = Diagnostician
OP = System supervisor
NA = Network administrator
NM = Node manager
SF = Save files
ND = Access to nonshareable I/O devices
UV = Use volumes
CV = Create volumes
CS = Use communication subsystem
PS = Programmatic sessions
LG = User logging
PH = Process handling
DS = Extra data segments
MR = Multiple RINs
PM = Privileged mode
IA = Interactive access
BA = Batch access
The defaults are AM, SF, ND, IA, and BA, for all
accounts except for the SYS account. The defaults
for the SYS account are SM, AM, AL, GL, DI, OP, SF,
ND, PH, DS, MR, and PM. You should not alter the
SYS account because it is assigned the maximum
account capabilities when the system is delivered.
If you remove a capability from an account, it is
unavailable to users of that account only after
they log off the system and then log back on.
ACCESS Specifies the restriction on file access pertinent
to this account. Valid syntax options are as
follows:
[{R} {ANY}]
[{L} {AC }]
([{A} [,...]: {GU }] [,...])
[{W} {AL }]
[{X} {GL }]
[{S} ]
where R, L, A, W, X, and S specify modes of access
by types of users (ANY, AC, GU, AL, GL) and are
defined as follows:
R = Read
L = Lock (exclusive file access)
A = Append (implies L)
W = Write (implies A and L)
X = Execute
S = Save
The user types are defined as follows:
ANY = Any user
AC = Member of this account only
GU = Member of this group only
AL = Account librarian user only
GL = Group librarian user only
You can specify two or more user and/or access
types if you separate them with commas.
The defaults are R,A,L,W,X:AC for all accounts
except for SYS. The SYS account defaults are
(R,X:ANY;A,W,L:AC).
Operation Notes
* Usage
You can enter this command from a session, a job, a program, or in
break mode. Pressing Break does not affect this command.
You must have system manager (SM) capability in order to use this
command.
* Altering account parameters
Basic guidelines for altering account parameters are as follows:
* You can enter multiple parameters on a single command line
by using the semicolon (;) delimiter.
* When you change one capability in a capability list that
contains several nondefault values, you must specify an
entire new capability list.
* A parameter remains unchanged for the account if you omit a
parameter and its value when entering the command.
* When you include a parameter but omit its value as in
PASS=Return, the default value is assigned.
* Activating the changes
If you alter one or more parameters while users are logged on, the
changes do not become effective until the users log off their
current jobs or sessions and log back on. Since the system does
not automatically generate a message informing users of changes,
you should notify users before you make any account changes. This
is particularly advisable when you remove a capability from an
account. In this case, all account members and groups within the
account are denied the capability.
* Restrictions
You cannot remove system manager (SM) capability from the SYS
account or account manager (AM) capability from any account. From
within any account, you can remove AM capability from all but one
(the last) of the users assigned the capability; however, you can
remove AM capability from all users in an account if you do this
from another user and account with SM capability.
Examples
* To change the password of an account named AC2 to GLOBALX, enter:
:ALTACCT AC2;PASS=GLOBALX
* To add SM capability to an account named AC2 and retain the
default capabilities, enter:
:ALTACCT AC2;CAP=SM,AM,AL,GL,ND,SF,BA,IA
Related Commands
ALTGROUP
ALTUSER
LISTACCT
LISTGROUP
LISTUSER
NEWACCT
NEWGROUP
NEWUSER
REPORT
RESETACCT