There should be a separate profile for each end user. It is good practice to set up a group profile for each department and make each end user profile belong to a group profile. General authorizations can then be granted to the group profile. The group profile may also own the application objects.
The group profile should be created with PASSWORD(*NONE) so that no one can actually sign on to it. A common prefix should be assigned to the group profile.
Individual profiles within the department should be indicated by initials or some other unique identifier.
On occasion, an end user may need to have access to another department’s applications through a separate profile. This profile should be created with a different prefix for the department, but the same identifier. For example:
For each group profile, it is worth considering having two special individual profiles:
|
Copyright © 2014 CA.
All rights reserved.
|
|