Defining and Maintaining CA Ideal Users › Creating CA Ideal Users in Batch

Creating CA Ideal Users in Batch

The usual method to create CA Ideal users is to use the CREATE USER command. However, adding large numbers of users this way can be a time-consuming process. CA Ideal users can be created in batch using Datadictionary (DDUPDATE).

A valid CA Ideal user definition consists of the following Datadictionary entity-occurrences:

• A PERSON entity-occurrence
• An ALIAS for the PERSON entity-occurrence that must match the PERSON userid attribute
• One or more RELATIONSHIP occurrences between the PERSON and the four CA Ideal AUTHORIZATION profiles and (optionally) one of the DD AUTHORIZATION profiles:
  • $$ID-ADM IDEAL Administrator
  • $$ID-DVW DVW Administrator
  • $$PR-ADM PRINT Administrator
  • $$ID-USE IDEAL User
• One or more RELATIONSHIP occurrences between the PERSON and the defined CA Ideal SYSTEM entity-occurrences. The intersection data (INTER-DATA) of this relationship occurrence must contain the following information:

  Pos Contents
  1-3 $ID (constant)
  4 One byte of bit settings for the authorization
  level in the related system, as follows:
  1... .... - Control
  .1.. .... - Update
  ..1. .... - Read
  ...1 .... - Run-Prod
  .... 1... - Not Used
  .... .1.. - Not Used
  .... ..1. - Update-Report
  .... ...1 - Update-Panel
  

Following is a sample set of DDUPDATE transactions to add a new user to CA Ideal:

    -ADD PERSON,long-user-name
	1003 RELT,SYSTEM,system-name(ver),PER-SYS-ACCESS 
	1003 DATA,$IDx 
	1010 ADD $$ID-ADM 
	1010 ADD $$ID-DVW 
	1010 ADD $$PR-ADM 
	1010 ADD $$ID-USE 
	1014 pppppppppppp uuu 
	-END
	-UPD PERSON,long-user-name(001),PROD
	-END

• The -ADD transaction is a header transaction. It adds the PERSON
  entity-occurrence for user long-user-name (from 1 to 15 characters).
• The 1003 RELT, SYSTEM transaction relates the user 'long-user-name' to the system 'system-name(ver)'. The new user can be related to a maximum of 99 SYSTEMs.
• There must be a matching 1003, DATA transaction for each 1003 RELT, SYSTEM transaction. The 1003 DATA transaction gives the user authorization within the system specified in the corresponding 1003 RELT, SYSTEM transaction. The authorization bit setting ('x') is determined using the following table:

  /--- AUTH IN SYS: TYPE:             HEX   CHAR
  |                 ---------------   ---   ----
  |                 CTL + RUN-PROD     F3     3
  |                 CTL                E3     T
  |                 UPD + RUN-PROD     7B     #
  |                 UPD                6C     %
  |                 READ + RUN-PROD    30      
  |                 READ               20      
  |                 RUN-PROD           10      
  |                                            
  ------------------------------------------
  

• The 1010 ADD transaction assigns the user a privilege title: {IDEAL-ADMIN, DATAVIEW-ADMIN, PRINT-ADMIN, IDEAL-USER}.

  For example, to define an IDEAL-USER, supply only the following transaction:

  1010 ADD $$ID-USE
  

• The 1014 transaction defines a password and the userid for the 'long-user-name'. If a password is not desired, the 1014 transaction must still be included to add the userid. Note that the userid MUST start in column 19.
• The -END transaction marks the conclusion of each transaction group.
• The -UPD transaction marks the 'long-user-name' definition to PROD status.
• The -END transaction marks the conclusion of each transaction group.

When these transactions have been successfully executed, the new CA Ideal user is ready to sign on.