 |
» |
|
|
|
The ALTACCT command enables a system administrator to change the parameters of an existing account. Syntax | |
ALTACCT acctname
[;PASS=[password]][;CAP=[capabilitylist]]
[;ACCESS=[(fileaccess)]]
|
Parameters | |
- acctname
Specifies the name of the account that you want to alter. The name must consist of one to eight alphanumeric characters, beginning with an alphabetic character. - PASS
Specifies the account password, only used for verifying logon access. Entering the ALTACCT command without this parameter retains the current password. Entering PASS without specifying password removes the existing password. Entering PASS and specifying password changes the current password or creates one if a password did not previously exist. - CAP
Specifies the list of capabilities permitted for this account that were assigned with the NEWACCT command. Each capability is indicated by a two-letter mnemonic, separated by commas, as follows:
SM = System manager
AM = Account manager
DI = Diagnostician
OP = System supervisor
NA = Network administrator
NM = Node manager
SF = Save files
ND = Access to nonshareable I/O devices
UV = Use volumes
CV = Create volumes
CS = Use communication subsystem
PS = Programmatic sessions
LG = User logging
PH = Process handling
DS = Extra data segments
MR = Multiple RINs
PM = Privileged mode
IA = Interactive access
BA = Batch access
|
The defaults are AM, SF, ND, IA, and BA, for all accounts except for the SYS account. The defaults for the SYS account are SM, AM, AL, GL, DI, OP, SF, ND, PH, DS, MR, and PM. You should not alter the SYS account because it is assigned the maximum account capabilities when the system is delivered. If you remove a capability from an account, it is unavailable to users of that account only after they log off the system and then log back on. - ACCESS
Specifies the restriction on file access pertinent to this account. Valid syntax options are as follows:
([{R
L
A
W
X
S}[,...]: {ANY
AC
GU
AL
GL }] [,...])
|
where R, L, A, W, X, and S specify modes of access by types of users (ANY, AC, GU, AL, GL) and are defined as follows:
R = Read
L = Lock (exclusive file access)
A = Append (implies L)
W = Write (implies A and L)
X = Execute
S = Save
|
The user types are defined as follows:
ANY = Any user
AC = Member of this account only
GU = Member of this group only
AL = Account librarian user only
GL = Group librarian user only
|
You can specify two or more user and/or access types if you separate them with commas. The defaults are R,A,L,W,X:AC for all accounts except for SYS. The SYS account defaults are (R,X:ANY;A,W,L:AC).
Operation Notes | |
Usage You can enter this command from a session, a job, a program, or in break mode. Pressing Break does not affect this command. You must have system manager (SM) capability in order to use this command. Altering account parameters Basic guidelines for altering account parameters are as follows: You can enter multiple parameters on a single command line by using the semicolon (;) delimiter. When you change one capability in a capability list that contains several nondefault values, you must specify an entire new capability list. A parameter remains unchanged for the account if you omit a parameter and its value when entering the command. When you include a parameter but omit its value as in PASS=Return, the default value is assigned.
Activating the changes If you alter one or more parameters while users are logged on, the changes do not become effective until the users log off their current jobs or sessions and log back on. Since the system does not automatically generate a message informing users of changes, you should notify users before you make any account changes. This is particularly advisable when you remove a capability from an account. In this case, all account members and groups within the account are denied the capability. Restrictions You cannot remove system manager (SM) capability from the SYS account or account manager (AM) capability from any account. From within any account, you can remove AM capability from all but one (the last) of the users assigned the capability; however, you can remove AM capability from all users in an account if you do this from another user and account with SM capability.
Examples | |
To change the password of an account named AC2 to GLOBALX, enter:
:ALTACCT AC2;PASS=GLOBALX
|
To add SM capability to an account named AC2 and retain the default capabilities, enter:
:ALTACCT AC2;CAP=SM,AM,AL,GL,ND,SF,BA,IA
|
Related Commands | |
ALTGROUP
ALTUSER
LISTACCT
LISTGROUP
LISTUSER
NEWACCT
NEWGROUP
NEWUSER
REPORT
RESETACCT
|
|
